@actuarial-ts/compliance 0.5.0 → 0.6.0

package/dist/diagnosticRun.js

@@ -0,0 +1,216 @@
+import { CORE_PACKAGE_VERSION, canonicalJson, fnv1a64, getMetricDiagnosticsResultIdentity, getPreparedDiagnosticDataIdentity, runMetricDiagnostics, verifyPreparedDiagnosticDataIntegrity, } from "@actuarial-ts/core";
+import { DATA_PACKAGE_VERSION, assertCompletedValidatedMetricDiagnosticsRun, reviewPreparedDiagnosticData, } from "@actuarial-ts/data";
+import { ComplianceError } from "./errors.js";
+import { COMPLIANCE_PACKAGE_VERSION } from "./version.js";
+const verified = new WeakMap();
+const token = (value, path) => {
+    if (value.length === 0 || /^[\t-\r ]|[\t-\r ]$/.test(value) || value.includes("\0"))
+        throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `${path} must be a nonempty token`, path);
+    for (let index = 0; index < value.length; index++) {
+        const unit = value.charCodeAt(index);
+        if (unit >= 0xd800 && unit <= 0xdbff) {
+            const next = value.charCodeAt(index + 1);
+            if (!(next >= 0xdc00 && next <= 0xdfff))
+                throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `${path} contains malformed Unicode`, path);
+            index++;
+        }
+        else if (unit >= 0xdc00 && unit <= 0xdfff)
+            throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `${path} contains malformed Unicode`, path);
+    }
+};
+function freeze(value, seen = new WeakSet()) { if (value === null || typeof value !== "object" || seen.has(value))
+    return value; seen.add(value); for (const child of Object.values(value))
+    freeze(child, seen); return Object.freeze(value); }
+function tag(kind, key, value) { return `fnv1a64-jcs-v1:${fnv1a64(canonicalJson({ identityVersion: 1, kind, [key]: value }))}`; }
+function snapshotArtifacts(evidence) {
+    const seen = new Set();
+    const result = [];
+    for (const [index, item] of evidence.entries()) {
+        token(item.id, `$.artifacts[${index}].id`);
+        token(item.scope, `$.artifacts[${index}].scope`);
+        if (seen.has(item.id))
+            throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `Duplicate artifact ID ${item.id}`, `$.artifacts[${index}].id`);
+        seen.add(item.id);
+        if (item.assurance === "sdk-computed") {
+            if (!(item.bytes instanceof Uint8Array))
+                throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "SDK-computed artifact evidence requires actual Uint8Array bytes", `$.artifacts[${index}].bytes`);
+            const bytes = new Uint8Array(item.bytes.byteLength);
+            bytes.set(item.bytes);
+            result.push({ id: item.id, scope: item.scope, assurance: item.assurance, bytes });
+        }
+        else {
+            token(item.algorithm, `$.artifacts[${index}].algorithm`);
+            token(item.value, `$.artifacts[${index}].value`);
+            if (!Number.isSafeInteger(item.byteLength) || item.byteLength < 0)
+                throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "Artifact byteLength must be a nonnegative safe integer", `$.artifacts[${index}].byteLength`);
+            result.push({ ...item });
+        }
+    }
+    return result.sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
+}
+async function digestArtifacts(snapshot) {
+    if (snapshot.some((item) => "bytes" in item) && globalThis.crypto?.subtle === undefined)
+        throw new ComplianceError("CRYPTO_UNAVAILABLE", "Web Crypto SHA-256 is unavailable", "$.artifacts");
+    return Promise.all(snapshot.map(async (item) => { if (!("bytes" in item))
+        return item; const hash = await globalThis.crypto.subtle.digest("SHA-256", item.bytes); return { id: item.id, scope: item.scope, assurance: item.assurance, algorithm: "sha-256", value: [...new Uint8Array(hash)].map((b) => b.toString(16).padStart(2, "0")).join(""), byteLength: item.bytes.byteLength }; }));
+}
+function snapshotLineage(lineage) {
+    return lineage.map((item, index) => { token(item.artifactId, `$.lineage[${index}].artifactId`); if (!Array.isArray(item.inputArtifactIds))
+        throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "Lineage inputs must be an array", `$.lineage[${index}].inputArtifactIds`); const inputs = item.inputArtifactIds.map((id, inputIndex) => { token(id, `$.lineage[${index}].inputArtifactIds[${inputIndex}]`); return id; }); if (new Set(inputs).size !== inputs.length)
+        throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "Lineage inputs must be unique", `$.lineage[${index}].inputArtifactIds`); return { artifactId: item.artifactId, inputArtifactIds: [...inputs].sort() }; }).sort((a, b) => a.artifactId < b.artifactId ? -1 : a.artifactId > b.artifactId ? 1 : 0);
+}
+function validateArtifactGraph(run, artifacts, lineage) {
+    const byId = new Map(artifacts.map((item) => [item.id, item]));
+    const referenced = new Set();
+    const requireArtifact = (id, scope, path) => { const artifact = byId.get(id); if (!artifact)
+        throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `Artifact reference ${id} is unresolved`, path); if (artifact.scope !== scope)
+        throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `Artifact ${id} must have ${scope} scope`, path); referenced.add(id); };
+    let unsourced = false;
+    for (const [index, item] of run.prepared.inputAudit.entries()) {
+        const source = item.record.source;
+        if (source)
+            requireArtifact(source.artifactId, "input", `$.completedRun.prepared.inputAudit[${index}].record.source.artifactId`);
+        else
+            unsourced = true;
+    }
+    const evidence = run.review.evidence;
+    if (evidence) {
+        for (const [index, item] of evidence.groupingAssignments.entries()) {
+            if (item.source)
+                requireArtifact(item.source.artifactId, "input", `$.completedRun.review.evidence.groupingAssignments[${index}].source.artifactId`);
+            else
+                unsourced = true;
+        }
+        for (const [index, item] of evidence.cachedFormulas.entries()) {
+            if (item.source)
+                requireArtifact(item.source.artifactId, "input", `$.completedRun.review.evidence.cachedFormulas[${index}].source.artifactId`);
+            else
+                unsourced = true;
+        }
+    }
+    if (unsourced) {
+        if (run.datasetArtifactId === null)
+            throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "Unsourced diagnostic input requires datasetArtifactId", "$.completedRun.datasetArtifactId");
+        const fallback = byId.get(run.datasetArtifactId);
+        if (!fallback || fallback.scope !== "input" || fallback.assurance !== "sdk-computed")
+            throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "datasetArtifactId must resolve to SDK-computed input evidence", "$.completedRun.datasetArtifactId");
+        referenced.add(run.datasetArtifactId);
+    }
+    else if (run.datasetArtifactId !== null)
+        requireArtifact(run.datasetArtifactId, "input", "$.completedRun.datasetArtifactId");
+    for (const [basisIndex, basis] of run.prepared.definition.definition.amountBases.entries())
+        for (const [componentIndex, component] of basis.components.entries())
+            if (component.limitation.kind !== "unlimited" && component.limitation.kind !== "unknown" && component.limitation.derivation.kind === "external")
+                requireArtifact(component.limitation.derivation.transformationRef, "preparation", `$.definition.amountBases[${basisIndex}].components[${componentIndex}].limitation.derivation.transformationRef`);
+    for (const [ruleIndex, rule] of run.prepared.definition.definition.reviewRules.entries())
+        if (rule.kind === "layer-order" && rule.comparability.kind === "caller-asserted")
+            requireArtifact(rule.comparability.rationaleArtifactId, "preparation", `$.definition.reviewRules[${ruleIndex}].comparability.rationaleArtifactId`);
+    if (run.gate.rationaleRef !== null)
+        requireArtifact(run.gate.rationaleRef, "preparation", "$.completedRun.gate.rationaleRef");
+    const edges = new Map();
+    for (const [index, edge] of lineage.entries()) {
+        if (edges.has(edge.artifactId))
+            throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "An artifact may have only one producing lineage edge", `$.lineage[${index}].artifactId`);
+        const downstream = byId.get(edge.artifactId);
+        if (!downstream)
+            throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `Lineage artifact ${edge.artifactId} is unresolved`, `$.lineage[${index}].artifactId`);
+        if (downstream.scope !== "input")
+            throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "Lineage downstream artifact must have input scope", `$.lineage[${index}].artifactId`);
+        for (const [inputIndex, id] of edge.inputArtifactIds.entries()) {
+            if (id === edge.artifactId)
+                throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "Lineage may not reference itself", `$.lineage[${index}].inputArtifactIds[${inputIndex}]`);
+            if (!byId.has(id))
+                throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `Lineage reference ${id} is unresolved`, `$.lineage[${index}].inputArtifactIds[${inputIndex}]`);
+        }
+        edges.set(edge.artifactId, edge.inputArtifactIds);
+    }
+    const visiting = new Set(), visited = new Set();
+    const walk = (id, path) => { if (visiting.has(id))
+        throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "Artifact lineage contains a cycle", path); if (visited.has(id))
+        return; visiting.add(id); for (const upstream of edges.get(id) ?? []) {
+        referenced.add(upstream);
+        walk(upstream, path);
+    } visiting.delete(id); visited.add(id); };
+    for (const id of [...referenced])
+        walk(id, "$.lineage");
+    for (const [index, artifact] of artifacts.entries())
+        if (!referenced.has(artifact.id))
+            throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `Artifact ${artifact.id} is orphaned`, `$.artifacts[${index}].id`);
+}
+function rerunAndVerify(run) {
+    assertCompletedValidatedMetricDiagnosticsRun(run);
+    verifyPreparedDiagnosticDataIntegrity(run.prepared);
+    const review = reviewPreparedDiagnosticData({ prepared: run.prepared, evidence: run.review.evidence });
+    if (review.reportFingerprint !== run.review.reportFingerprint || canonicalJson(review.identityBody) !== canonicalJson(run.review.identityBody))
+        throw new ComplianceError("DIAGNOSTIC_MISMATCH", "Stored diagnostic review does not match a regenerated review", "$.review");
+    const rerun = runMetricDiagnostics({ prepared: run.prepared, groupMap: run.groupMap, groupDimensions: run.groupDimensions });
+    if (canonicalJson(getMetricDiagnosticsResultIdentity(rerun)) !== canonicalJson(getMetricDiagnosticsResultIdentity(run.result)))
+        throw new ComplianceError("DIAGNOSTIC_MISMATCH", "Stored diagnostic result does not match deterministic replay", "$.result");
+    const reviewBlocked = review.report.checks.some((check) => !run.gate.allowedReviewStatuses.includes(check.status));
+    const metricBlocked = rerun.findings.some((finding) => finding.category !== "structural" && !run.gate.allowedMetricFindingSeverities.includes(finding.severity));
+    if (reviewBlocked || metricBlocked || run.gate.reviewGate !== "passed" || run.gate.metricGate !== "passed")
+        throw new ComplianceError("DIAGNOSTIC_MISMATCH", "Diagnostic execution gates do not recompute as passed", "$.gate");
+    return { review, result: getMetricDiagnosticsResultIdentity(run.result) };
+}
+export async function createDiagnosticRunIdentity(input) {
+    const run = input.completedRun;
+    const authenticated = rerunAndVerify(run);
+    const artifactSnapshot = snapshotArtifacts(input.artifacts ?? []);
+    const lineage = snapshotLineage(input.lineage ?? []);
+    const artifacts = await digestArtifacts(artifactSnapshot);
+    validateArtifactGraph(run, artifacts, lineage);
+    const preparation = getPreparedDiagnosticDataIdentity(run.prepared);
+    const expectedGridFingerprint = preparation.expectedCellsProvided ? tag("diagnostic-expected-grid", "expectedCells", preparation.expectedCells) : null;
+    const manifest = freeze({ definitionIntegrity: run.prepared.definition.definitionIntegrity, runPresetId: run.runPresetId, datasetArtifactId: run.datasetArtifactId, packageVersions: { "@actuarial-ts/core": CORE_PACKAGE_VERSION, "@actuarial-ts/data": DATA_PACKAGE_VERSION, "@actuarial-ts/compliance": COMPLIANCE_PACKAGE_VERSION }, preparation, preparationFingerprint: run.prepared.preparationFingerprint, expectedGridFingerprint, executionPolicy: { review: { body: authenticated.review.identityBody, reportFingerprint: authenticated.review.reportFingerprint }, gate: run.gate }, groupMap: { ...run.groupMap }, groupDimensions: { ...run.groupDimensions }, artifacts, lineage });
+    const runFingerprint = tag("diagnostic-run", "run", manifest);
+    const resultFingerprint = tag("diagnostic-result", "result", authenticated.result);
+    const runResultFingerprint = tag("diagnostic-run-result", "binding", { runFingerprint, resultFingerprint });
+    const definition = run.prepared.definition;
+    const provenance = freeze({ definition: definition.definition, definitionIdentities: { algorithm: "fnv1a64-jcs-v1", formulaById: { ...definition.formulaFingerprints }, calculationByInstanceId: { ...definition.calculationFingerprints }, definition: definition.definitionIntegrity }, manifest, review: authenticated.review, result: run.result, runFingerprint, resultFingerprint, runResultFingerprint });
+    verified.set(provenance, run);
+    return provenance;
+}
+export function assertVerifiedDiagnosticRunProvenance(value) { if (value === null || typeof value !== "object" || !verified.has(value))
+    throw new ComplianceError("BAD_DIAGNOSTIC_RUN", "Value is not authentic verified diagnostic provenance", "$"); }
+/** @internal Bundle authoring uses owner state rather than trusting the public snapshot. */
+export function verifiedDefinitionForBundle(value) { assertVerifiedDiagnosticRunProvenance(value); return verified.get(value).prepared.definition; }
+export async function verifyDiagnosticRunIdentity(candidate, input) {
+    const regenerated = await createDiagnosticRunIdentity(input);
+    let left;
+    try {
+        left = canonicalJson(candidate);
+    }
+    catch {
+        throw new ComplianceError("DIAGNOSTIC_MISMATCH", "Stored diagnostic provenance is not canonical JSON", "$");
+    }
+    if (left !== canonicalJson(regenerated))
+        throw new ComplianceError("DIAGNOSTIC_MISMATCH", "Stored diagnostic provenance differs from regenerated provenance", firstDifference(candidate, regenerated, "$") ?? "$");
+    return regenerated;
+}
+function plain(value) { if (value === null || typeof value !== "object" || Array.isArray(value))
+    return false; const prototype = Object.getPrototypeOf(value); return prototype === Object.prototype || prototype === null; }
+function firstDifference(left, right, path) { if (plain(left) && plain(right)) {
+    const keys = [...new Set([...Object.keys(left), ...Object.keys(right)])].sort();
+    for (const key of keys) {
+        if (!(key in left) || !(key in right))
+            return `${path}.${key}`;
+        const found = firstDifference(left[key], right[key], `${path}.${key}`);
+        if (found)
+            return found;
+    }
+    return null;
+} if (Array.isArray(left) && Array.isArray(right)) {
+    const shared = Math.min(left.length, right.length);
+    for (let index = 0; index < shared; index++) {
+        const found = firstDifference(left[index], right[index], `${path}[${index}]`);
+        if (found)
+            return found;
+    }
+    return left.length === right.length ? null : `${path}[${shared}]`;
+} try {
+    return canonicalJson(left) === canonicalJson(right) ? null : path;
+}
+catch {
+    return path;
+} }
+//# sourceMappingURL=diagnosticRun.js.map

package/dist/diagnosticRun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticRun.js","sourceRoot":"","sources":["../src/diagnosticRun.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,OAAO,EACP,kCAAkC,EAClC,iCAAiC,EACjC,oBAAoB,EACpB,qCAAqC,GAOtC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,4CAA4C,EAC5C,4BAA4B,GAI7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAyC1D,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAkD,CAAC;AAC/E,MAAM,KAAK,GAAG,CAAC,KAAY,EAAC,IAAW,EAAE,EAAE;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,GAAG,IAAI,2BAA2B,EAAE,IAAI,CAAC,CAAC;IAC/K,KAAI,IAAI,KAAK,GAAC,CAAC,EAAC,KAAK,GAAC,KAAK,CAAC,MAAM,EAAC,KAAK,EAAE,EAAC,CAAC;QAAA,MAAM,IAAI,GAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAAA,IAAG,IAAI,IAAE,MAAM,IAAE,IAAI,IAAE,MAAM,EAAC,CAAC;YAAA,MAAM,IAAI,GAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAC,CAAC,CAAC,CAAC;YAAA,IAAG,CAAC,CAAC,IAAI,IAAE,MAAM,IAAE,IAAI,IAAE,MAAM,CAAC;gBAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,GAAG,IAAI,6BAA6B,EAAC,IAAI,CAAC,CAAC;YAAA,KAAK,EAAE,CAAA;QAAA,CAAC;aAAK,IAAG,IAAI,IAAE,MAAM,IAAE,IAAI,IAAE,MAAM;YAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,GAAG,IAAI,6BAA6B,EAAC,IAAI,CAAC,CAAA;IAAA,CAAC;AACrZ,CAAC,CAAC;AACF,SAAS,MAAM,CAAI,KAAO,EAAC,OAAK,IAAI,OAAO,EAAU,IAA4B,IAAG,KAAK,KAAG,IAAI,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;IAAC,OAAO,KAAkC,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA,KAAI,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAA+B,CAAC;IAAC,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,CAAC,CAAA,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAA8B,CAAA,CAAA,CAAC;AACnV,SAAS,GAAG,CAAC,IAAW,EAAC,GAAU,EAAC,KAAa,IAAS,OAAO,kBAAkB,OAAO,CAAC,aAAa,CAAC,EAAC,eAAe,EAAC,CAAC,EAAC,IAAI,EAAC,CAAC,GAAG,CAAC,EAAC,KAAK,EAAC,CAAC,CAAC,EAAE,CAAA,CAAA,CAAC;AAElJ,SAAS,iBAAiB,CAAC,QAA8C;IACvE,MAAM,IAAI,GAAC,IAAI,GAAG,EAAU,CAAC;IAAA,MAAM,MAAM,GAAuB,EAAE,CAAC;IACnE,KAAI,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,EAAC,eAAe,KAAK,MAAM,CAAC,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,KAAK,EAAC,eAAe,KAAK,SAAS,CAAC,CAAC;QAAA,IAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,yBAAyB,IAAI,CAAC,EAAE,EAAE,EAAC,eAAe,KAAK,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/O,IAAG,IAAI,CAAC,SAAS,KAAG,cAAc,EAAC,CAAC;YAClC,IAAG,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC;gBAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,iEAAiE,EAAC,eAAe,KAAK,SAAS,CAAC,CAAC;YACvL,MAAM,KAAK,GAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAAA,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAA,MAAM,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,IAAI,CAAC,EAAE,EAAC,KAAK,EAAC,IAAI,CAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,SAAS,EAAC,KAAK,EAAC,CAAC,CAAC;QACpJ,CAAC;aAAI,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,SAAS,EAAC,eAAe,KAAK,aAAa,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,KAAK,EAAC,eAAe,KAAK,SAAS,CAAC,CAAC;YAAA,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAE,IAAI,CAAC,UAAU,GAAC,CAAC;gBAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,wDAAwD,EAAC,eAAe,KAAK,cAAc,CAAC,CAAC;YAAA,MAAM,CAAC,IAAI,CAAC,EAAC,GAAG,IAAI,EAAC,CAAC,CAAA;QAAA,CAAC;IAChV,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,CAAC,EAAE,GAAC,CAAC,CAAC,EAAE,CAAA,CAAC,CAAA,CAAC,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,EAAE,GAAC,CAAC,CAAC,EAAE,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,CAAC;AACxD,CAAC;AACD,KAAK,UAAU,eAAe,CAAC,QAAuC;IACpE,IAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAC,EAAE,CAAA,OAAO,IAAI,IAAI,CAAC,IAAE,UAAU,CAAC,MAAM,EAAE,MAAM,KAAG,SAAS;QAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,mCAAmC,EAAC,aAAa,CAAC,CAAC;IACnL,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,GAAC,IAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,CAAA,MAAM,IAAI,GAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA,OAAO,EAAC,EAAE,EAAC,IAAI,CAAC,EAAE,EAAC,KAAK,EAAC,IAAI,CAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,SAAS,EAAC,SAAS,EAAC,SAAS,EAAC,KAAK,EAAC,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAC,UAAU,EAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAC,CAAA,CAAA,CAAC,CAAC,CAAC,CAAC;AACjW,CAAC;AAED,SAAS,eAAe,CAAC,OAA+C;IACtE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAC,KAAK,EAAC,EAAE,GAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAC,aAAa,KAAK,cAAc,CAAC,CAAC,CAAA,IAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,iCAAiC,EAAC,aAAa,KAAK,oBAAoB,CAAC,CAAC,CAAA,MAAM,MAAM,GAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAC,UAAU,EAAC,EAAE,GAAC,KAAK,CAAC,EAAE,EAAC,aAAa,KAAK,sBAAsB,UAAU,GAAG,CAAC,CAAC,CAAA,OAAO,EAAE,CAAA,CAAA,CAAC,CAAC,CAAC,CAAA,IAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAG,MAAM,CAAC,MAAM;QAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,+BAA+B,EAAC,aAAa,KAAK,oBAAoB,CAAC,CAAC,CAAA,OAAO,EAAC,UAAU,EAAC,IAAI,CAAC,UAAU,EAAC,gBAAgB,EAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAC,CAAA,CAAA,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,CAAC,UAAU,GAAC,CAAC,CAAC,UAAU,CAAA,CAAC,CAAA,CAAC,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,UAAU,GAAC,CAAC,CAAC,UAAU,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,CAAC;AACprB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAA0C,EAAC,SAA6C,EAAC,OAA+C;IACrK,MAAM,IAAI,GAAC,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAC,EAAE,CAAA,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAC,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,eAAe,GAAC,CAAC,EAAS,EAAC,KAA2B,EAAC,IAAW,EAAC,EAAE,GAAC,MAAM,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA,IAAG,CAAC,QAAQ;QAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,sBAAsB,EAAE,gBAAgB,EAAC,IAAI,CAAC,CAAC,CAAA,IAAG,QAAQ,CAAC,KAAK,KAAG,KAAK;QAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,YAAY,EAAE,cAAc,KAAK,QAAQ,EAAC,IAAI,CAAC,CAAC,CAAA,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA,CAAA,CAAC,CAAC;IAChW,IAAI,SAAS,GAAC,KAAK,CAAC;IACpB,KAAI,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,EAAC,CAAC;QAAA,MAAM,MAAM,GAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAA,IAAG,MAAM;YAAC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAC,OAAO,EAAC,sCAAsC,KAAK,4BAA4B,CAAC,CAAC;;YAAK,SAAS,GAAC,IAAI,CAAA;IAAA,CAAC;IAC9O,MAAM,QAAQ,GAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;IACnC,IAAG,QAAQ,EAAC,CAAC;QAAA,KAAI,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,EAAC,CAAC;YAAA,IAAG,IAAI,CAAC,MAAM;gBAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAC,OAAO,EAAC,sDAAsD,KAAK,qBAAqB,CAAC,CAAC;;gBAAK,SAAS,GAAC,IAAI,CAAA;QAAA,CAAC;QAAA,KAAI,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,EAAC,CAAC;YAAA,IAAG,IAAI,CAAC,MAAM;gBAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAC,OAAO,EAAC,iDAAiD,KAAK,qBAAqB,CAAC,CAAC;;gBAAK,SAAS,GAAC,IAAI,CAAA;QAAA,CAAC;IAAA,CAAC;IAChd,IAAG,SAAS,EAAC,CAAC;QAAA,IAAG,GAAG,CAAC,iBAAiB,KAAG,IAAI;YAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,uDAAuD,EAAC,kCAAkC,CAAC,CAAC;QAAA,MAAM,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAAA,IAAG,CAAC,QAAQ,IAAE,QAAQ,CAAC,KAAK,KAAG,OAAO,IAAE,QAAQ,CAAC,SAAS,KAAG,cAAc;YAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,+DAA+D,EAAC,kCAAkC,CAAC,CAAC;QAAA,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAAA,CAAC;SACxe,IAAG,GAAG,CAAC,iBAAiB,KAAG,IAAI;QAAC,eAAe,CAAC,GAAG,CAAC,iBAAiB,EAAC,OAAO,EAAC,kCAAkC,CAAC,CAAC;IACvH,KAAI,MAAM,CAAC,UAAU,EAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE;QAAC,KAAI,MAAM,CAAC,cAAc,EAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE;YAAC,IAAG,SAAS,CAAC,UAAU,CAAC,IAAI,KAAG,WAAW,IAAE,SAAS,CAAC,UAAU,CAAC,IAAI,KAAG,SAAS,IAAE,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAG,UAAU;gBAAC,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,iBAAiB,EAAC,aAAa,EAAC,4BAA4B,UAAU,gBAAgB,cAAc,2CAA2C,CAAC,CAAC;IACle,KAAI,MAAM,CAAC,SAAS,EAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE;QAAC,IAAG,IAAI,CAAC,IAAI,KAAG,aAAa,IAAE,IAAI,CAAC,aAAa,CAAC,IAAI,KAAG,iBAAiB;YAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAC,aAAa,EAAC,4BAA4B,SAAS,qCAAqC,CAAC,CAAC;IAClT,IAAG,GAAG,CAAC,IAAI,CAAC,YAAY,KAAG,IAAI;QAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAC,aAAa,EAAC,kCAAkC,CAAC,CAAC;IACxH,MAAM,KAAK,GAAC,IAAI,GAAG,EAA4B,CAAC;IAAA,KAAI,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAC,CAAC;QAAA,IAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;YAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,sDAAsD,EAAC,aAAa,KAAK,cAAc,CAAC,CAAC;QAAA,MAAM,UAAU,GAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAA,IAAG,CAAC,UAAU;YAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,oBAAoB,IAAI,CAAC,UAAU,gBAAgB,EAAC,aAAa,KAAK,cAAc,CAAC,CAAC;QAAA,IAAG,UAAU,CAAC,KAAK,KAAG,OAAO;YAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,mDAAmD,EAAC,aAAa,KAAK,cAAc,CAAC,CAAC;QAAA,KAAI,MAAM,CAAC,UAAU,EAAC,EAAE,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAC,CAAC;YAAA,IAAG,EAAE,KAAG,IAAI,CAAC,UAAU;gBAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,kCAAkC,EAAC,aAAa,KAAK,sBAAsB,UAAU,GAAG,CAAC,CAAC;YAAA,IAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,qBAAqB,EAAE,gBAAgB,EAAC,aAAa,KAAK,sBAAsB,UAAU,GAAG,CAAC,CAAA;QAAA,CAAC;QAAA,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAAA,CAAC;IACphC,MAAM,QAAQ,GAAC,IAAI,GAAG,EAAU,EAAC,OAAO,GAAC,IAAI,GAAG,EAAU,CAAC;IAAA,MAAM,IAAI,GAAC,CAAC,EAAS,EAAC,IAAW,EAAC,EAAE,GAAC,IAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,mCAAmC,EAAC,IAAI,CAAC,CAAC,CAAA,IAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,OAAO,CAAA,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA,KAAI,MAAM,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAE,EAAE,EAAC,CAAC;QAAA,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,CAAA;IAAA,CAAC,CAAA,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA,CAAA,CAAC,CAAC;IAAA,KAAI,MAAM,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,EAAC,WAAW,CAAC,CAAC;IACxa,KAAI,MAAM,CAAC,KAAK,EAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE;QAAC,IAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,YAAY,QAAQ,CAAC,EAAE,cAAc,EAAE,eAAe,KAAK,MAAM,CAAC,CAAC;AACtM,CAAC;AAED,SAAS,cAAc,CAAC,GAA0C;IAChE,4CAA4C,CAAC,GAAG,CAAC,CAAC;IAAA,qCAAqC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtG,MAAM,MAAM,GAAC,4BAA4B,CAAC,EAAC,QAAQ,EAAC,GAAG,CAAC,QAAQ,EAAC,QAAQ,EAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAC,CAAC,CAAC;IAChG,IAAG,MAAM,CAAC,iBAAiB,KAAG,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAE,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,KAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAC,8DAA8D,EAAC,UAAU,CAAC,CAAC;IACnQ,MAAM,KAAK,GAAC,oBAAoB,CAAC,EAAC,QAAQ,EAAC,GAAG,CAAC,QAAQ,EAAC,QAAQ,EAAC,GAAG,CAAC,QAAQ,EAAC,eAAe,EAAC,GAAG,CAAC,eAAe,EAAC,CAAC,CAAC;IACpH,IAAG,aAAa,CAAC,kCAAkC,CAAC,KAAK,CAAC,CAAC,KAAG,aAAa,CAAC,kCAAkC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAC,8DAA8D,EAAC,UAAU,CAAC,CAAC;IACvP,MAAM,aAAa,GAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAC,EAAE,CAAA,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/G,MAAM,aAAa,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAC,EAAE,CAAA,OAAO,CAAC,QAAQ,KAAG,YAAY,IAAE,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzJ,IAAG,aAAa,IAAE,aAAa,IAAE,GAAG,CAAC,IAAI,CAAC,UAAU,KAAG,QAAQ,IAAE,GAAG,CAAC,IAAI,CAAC,UAAU,KAAG,QAAQ;QAAC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAC,uDAAuD,EAAC,QAAQ,CAAC,CAAC;IAClN,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,kCAAkC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAAsC;IACtF,MAAM,GAAG,GAAC,KAAK,CAAC,YAAY,CAAC;IAAA,MAAM,aAAa,GAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IAAA,MAAM,gBAAgB,GAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,IAAE,EAAE,CAAC,CAAC;IAAA,MAAM,OAAO,GAAC,eAAe,CAAC,KAAK,CAAC,OAAO,IAAE,EAAE,CAAC,CAAC;IAAA,MAAM,SAAS,GAAC,MAAM,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAAA,qBAAqB,CAAC,GAAG,EAAC,SAAS,EAAC,OAAO,CAAC,CAAC;IACzR,MAAM,WAAW,GAAC,iCAAiC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,uBAAuB,GAAC,WAAW,CAAC,qBAAqB,CAAA,CAAC,CAAA,GAAG,CAAC,0BAA0B,EAAC,eAAe,EAAC,WAAW,CAAC,aAAa,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;IAC/I,MAAM,QAAQ,GAAC,MAAM,CAAC,EAAC,mBAAmB,EAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,EAAC,WAAW,EAAC,GAAG,CAAC,WAAW,EAAC,iBAAiB,EAAC,GAAG,CAAC,iBAAiB,EAAC,eAAe,EAAC,EAAC,oBAAoB,EAAC,oBAAoB,EAAC,oBAAoB,EAAC,oBAAoB,EAAC,0BAA0B,EAAC,0BAA0B,EAAC,EAAC,WAAW,EAAC,sBAAsB,EAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,EAAC,uBAAuB,EAAC,eAAe,EAAC,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,aAAa,CAAC,MAAM,CAAC,YAAY,EAAC,iBAAiB,EAAC,aAAa,CAAC,MAAM,CAAC,iBAAiB,EAAC,EAAC,IAAI,EAAC,GAAG,CAAC,IAAI,EAAC,EAAC,QAAQ,EAAC,EAAC,GAAG,GAAG,CAAC,QAAQ,EAAC,EAAC,eAAe,EAAC,EAAC,GAAG,GAAG,CAAC,eAAe,EAAC,EAAC,SAAS,EAAC,OAAO,EAAC,CAAC,CAAC;IACvnB,MAAM,cAAc,GAAC,GAAG,CAAC,gBAAgB,EAAC,KAAK,EAAC,QAAQ,CAAC,CAAC;IAAA,MAAM,iBAAiB,GAAC,GAAG,CAAC,mBAAmB,EAAC,QAAQ,EAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAAA,MAAM,oBAAoB,GAAC,GAAG,CAAC,uBAAuB,EAAC,SAAS,EAAC,EAAC,cAAc,EAAC,iBAAiB,EAAC,CAAC,CAAC;IAC9O,MAAM,UAAU,GAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;IACzC,MAAM,UAAU,GAAC,MAAM,CAAC,EAAC,UAAU,EAAC,UAAU,CAAC,UAAU,EAAC,oBAAoB,EAAC,EAAC,SAAS,EAAC,gBAAyB,EAAC,WAAW,EAAC,EAAC,GAAG,UAAU,CAAC,mBAAmB,EAAC,EAAC,uBAAuB,EAAC,EAAC,GAAG,UAAU,CAAC,uBAAuB,EAAC,EAAC,UAAU,EAAC,UAAU,CAAC,mBAAmB,EAAC,EAAC,QAAQ,EAAC,MAAM,EAAC,aAAa,CAAC,MAAM,EAAC,MAAM,EAAC,GAAG,CAAC,MAAM,EAAC,cAAc,EAAC,iBAAiB,EAAC,oBAAoB,EAAC,CAA+C,CAAC;IAC5a,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAC,GAAG,CAAC,CAAC;IAAA,OAAO,UAAU,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAAa,IAAmD,IAAG,KAAK,KAAG,IAAI,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;IAAC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAC,uDAAuD,EAAC,GAAG,CAAC,CAAA,CAAA,CAAC;AAEjS,4FAA4F;AAC5F,MAAM,UAAU,2BAA2B,CAAC,KAAqC,IAA+B,qCAAqC,CAAC,KAAK,CAAC,CAAC,CAAA,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,QAAQ,CAAC,UAAU,CAAA,CAAA,CAAC;AAE7M,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,SAAiB,EAAC,KAAsC;IACxG,MAAM,WAAW,GAAC,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,IAAW,CAAC;IAAA,IAAG,CAAC;QAAA,IAAI,GAAC,aAAa,CAAC,SAAS,CAAC,CAAA;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAC,oDAAoD,EAAC,GAAG,CAAC,CAAA;IAAA,CAAC;IAClK,IAAG,IAAI,KAAG,aAAa,CAAC,WAAW,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAC,kEAAkE,EAAC,eAAe,CAAC,SAAS,EAAC,WAAW,EAAC,GAAG,CAAC,IAAE,GAAG,CAAC,CAAC;IACzM,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,IAAkC,IAAG,KAAK,KAAG,IAAI,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAAC,OAAO,KAAK,CAAC,CAAA,MAAM,SAAS,GAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA,OAAO,SAAS,KAAG,MAAM,CAAC,SAAS,IAAE,SAAS,KAAG,IAAI,CAAA,CAAA,CAAC;AAC7O,SAAS,eAAe,CAAC,IAAY,EAAC,KAAa,EAAC,IAAW,IAAc,IAAG,KAAK,CAAC,IAAI,CAAC,IAAE,KAAK,CAAC,KAAK,CAAC,EAAC,CAAC;IAAA,MAAM,IAAI,GAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAAA,KAAI,MAAM,GAAG,IAAI,IAAI,EAAC,CAAC;QAAA,IAAG,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,IAAE,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;YAAC,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;QAAA,MAAM,KAAK,GAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,KAAK,CAAC,GAAG,CAAC,EAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QAAA,IAAG,KAAK;YAAC,OAAO,KAAK,CAAA;IAAA,CAAC;IAAA,OAAO,IAAI,CAAA;AAAA,CAAC,CAAA,IAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,CAAC;IAAA,MAAM,MAAM,GAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAA,KAAI,IAAI,KAAK,GAAC,CAAC,EAAC,KAAK,GAAC,MAAM,EAAC,KAAK,EAAE,EAAC,CAAC;QAAA,MAAM,KAAK,GAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAC,KAAK,CAAC,KAAK,CAAC,EAAC,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;QAAA,IAAG,KAAK;YAAC,OAAO,KAAK,CAAA;IAAA,CAAC;IAAA,OAAO,IAAI,CAAC,MAAM,KAAG,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,GAAG,IAAI,IAAI,MAAM,GAAG,CAAA;AAAA,CAAC,CAAA,IAAG,CAAC;IAAA,OAAO,aAAa,CAAC,IAAI,CAAC,KAAG,aAAa,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,IAAI,CAAA;AAAA,CAAC;AAAA,MAAK,CAAC;IAAA,OAAO,IAAI,CAAA;AAAA,CAAC,CAAA,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,8 @@
+export declare const COMPLIANCE_ERROR_CODES: readonly ["BAD_BUNDLE", "BAD_CDF", "MISSING_RATIONALE", "BAD_DIAGNOSTIC_RUN", "DIAGNOSTIC_MISMATCH", "CRYPTO_UNAVAILABLE"];
+export type ComplianceErrorCode = (typeof COMPLIANCE_ERROR_CODES)[number];
+export declare class ComplianceError extends Error {
+    readonly code: ComplianceErrorCode;
+    readonly path?: string;
+    constructor(code: ComplianceErrorCode, message: string, path?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,4HAGzB,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBACX,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAGtE"}

package/dist/errors.js

@@ -0,0 +1,16 @@
+export const COMPLIANCE_ERROR_CODES = [
+    "BAD_BUNDLE", "BAD_CDF", "MISSING_RATIONALE", "BAD_DIAGNOSTIC_RUN",
+    "DIAGNOSTIC_MISMATCH", "CRYPTO_UNAVAILABLE",
+];
+export class ComplianceError extends Error {
+    code;
+    path;
+    constructor(code, message, path) {
+        super(message);
+        this.name = "ComplianceError";
+        this.code = code;
+        if (path !== undefined)
+            this.path = path;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,oBAAoB;IAClE,qBAAqB,EAAE,oBAAoB;CACnC,CAAC;AAEX,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAsB;IAC1B,IAAI,CAAU;IACvB,YAAY,IAAyB,EAAE,OAAe,EAAE,IAAa;QACnE,KAAK,CAAC,OAAO,CAAC,CAAC;QAAA,IAAI,CAAC,IAAI,GAAC,iBAAiB,CAAC;QAAA,IAAI,CAAC,IAAI,GAAC,IAAI,CAAC;QAAA,IAAG,IAAI,KAAG,SAAS;YAAC,IAAI,CAAC,IAAI,GAAC,IAAI,CAAC;IAC/F,CAAC;CACF"}

package/dist/index.d.ts

@@ -1,8 +1,10 @@
 export * from "./metadata.js";
+export * from "./errors.js";
+export * from "./version.js";
 export * from "./ledger.js";
 export * from "./modelCards.js";
 export * from "./disclosure.js";
-export * from "./diagnostics.js";
+export * from "./diagnosticRun.js";
 export * from "./bundle.js";
 export * from "./ave.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}

package/dist/index.js

@@ -1,8 +1,10 @@
 export * from "./metadata.js";
+export * from "./errors.js";
+export * from "./version.js";
 export * from "./ledger.js";
 export * from "./modelCards.js";
 export * from "./disclosure.js";
-export * from "./diagnostics.js";
+export * from "./diagnosticRun.js";
 export * from "./bundle.js";
 export * from "./ave.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const COMPLIANCE_PACKAGE_VERSION = "0.6.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,0BAA0B,UAAU,CAAC"}

package/dist/version.js

@@ -0,0 +1,2 @@
+export const COMPLIANCE_PACKAGE_VERSION = "0.6.0";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actuarial-ts/compliance",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "ASOP-compliance-support layer for the actuarial-ts SDK: estimate metadata, assumption ledger, disclosures, model cards, diagnostics provenance, reproducibility bundles, and actual-vs-expected roll-forward. Responsibility for compliance remains with the credentialed actuary.",
   "license": "Apache-2.0",
   "type": "module",
@@ -46,8 +46,9 @@
     "prepack": "tsc -p tsconfig.build.json"
   },
   "dependencies": {
-    "@actuarial-ts/core": "^0.5.0",
-    "@actuarial-ts/interchange": "^0.5.0"
+    "@actuarial-ts/core": "^0.6.0",
+    "@actuarial-ts/data": "^0.6.0",
+    "@actuarial-ts/interchange": "^0.6.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.5",

package/src/bundle.ts

@@ -27,13 +27,22 @@
  */
 
 import { canonicalJson, fnv1a64 } from "@actuarial-ts/core";
-import type {
+import {
+  INTERCHANGE_SPEC_VERSION,
+  diagnosticDefinitionToDoc,
+  type DiagnosticDefinitionDoc,
   BundleDoc,
   MethodResultDoc,
   SelectionDoc,
   StochasticResultDoc,
   TriangleDoc,
 } from "@actuarial-ts/interchange";
+import type { VerifiedDiagnosticRunProvenance } from "./diagnosticRun.js";
+import { assertVerifiedDiagnosticRunProvenance, verifiedDefinitionForBundle } from "./diagnosticRun.js";
+import { ComplianceError } from "./errors.js";
+import { COMPLIANCE_PACKAGE_VERSION } from "./version.js";
+export { ComplianceError, COMPLIANCE_ERROR_CODES, type ComplianceErrorCode } from "./errors.js";
+export { COMPLIANCE_PACKAGE_VERSION } from "./version.js";
 
 export { canonicalJson, fnv1a64 };
 
@@ -54,23 +63,6 @@ export type WrappedBundleDoc = BundleDoc;
  * of this package. Add the code here when introducing a new throw.
  * (UNSUPPORTED_VALUE moved to core's registry with canonicalJson in 0.2.0.)
  */
-export const COMPLIANCE_ERROR_CODES = [
-  "BAD_BUNDLE",
-  "BAD_CDF",
-  "MISSING_RATIONALE",
-] as const;
-
-export type ComplianceErrorCode = (typeof COMPLIANCE_ERROR_CODES)[number];
-
-/** Thrown for invalid compliance input (bad bundles, judgment without rationale, non-positive CDFs). */
-export class ComplianceError extends Error {
-  readonly code: ComplianceErrorCode;
-  constructor(code: ComplianceErrorCode, message: string) {
-    super(message);
-    this.name = "ComplianceError";
-    this.code = code;
-  }
-}
 
 
 
@@ -81,7 +73,7 @@ export class ComplianceError extends Error {
  * test parses the emitted doc with the real interchange parser, which
  * refuses a wrong-major version — drift fails loudly.
  */
-export const WRAPPED_BUNDLE_INTERCHANGE_VERSION = "1.0.0";
+export const WRAPPED_BUNDLE_INTERCHANGE_VERSION = INTERCHANGE_SPEC_VERSION;
 
 /**
  * This package's version, stamped into a wrapped bundle's `generator`
@@ -89,7 +81,6 @@ export const WRAPPED_BUNDLE_INTERCHANGE_VERSION = "1.0.0";
  * silently drift (mirroring interchange's INTERCHANGE_PACKAGE_VERSION
  * discipline).
  */
-export const COMPLIANCE_PACKAGE_VERSION = "0.5.0";
 
 /**
  * The interchange mirror for a wrapped bundle (spec 3.2): the triangles the
@@ -136,6 +127,8 @@ export interface CreateBundleInput {
    * Wrapped-mode only; the inner payload never carries it.
    */
   generator?: { name: string; version: string };
+  /** Authenticated diagnostic runs included in the canonical body and, when wrapped, as typed definition documents. */
+  diagnosticRuns?: readonly VerifiedDiagnosticRunProvenance[];
 }
 
 export interface ReproducibilityBundle {
@@ -176,6 +169,11 @@ export function createBundle(input: CreateBundleInput): ReproducibilityBundle |
     sdkVersions: input.sdkVersions,
   };
   if (input.seeds !== undefined) body["seeds"] = input.seeds;
+  if (input.diagnosticRuns !== undefined) {
+    for (const run of input.diagnosticRuns) assertVerifiedDiagnosticRunProvenance(run);
+    if(input.diagnosticRuns.length>0){const expected=input.diagnosticRuns[0]!.manifest.packageVersions;for(const [runIndex,run] of input.diagnosticRuns.entries()){if(canonicalJson(run.manifest.packageVersions)!==canonicalJson(expected))throw new ComplianceError("BAD_DIAGNOSTIC_RUN","Diagnostic runs disagree on SDK package versions",`$.diagnosticRuns[${runIndex}].manifest.packageVersions`)}for(const [name,version] of Object.entries(expected))if(input.sdkVersions[name]!==version)throw new ComplianceError("BAD_DIAGNOSTIC_RUN",`Outer sdkVersions must record ${name} at ${version}`,`$.sdkVersions.${name}`);if(input.wrap!==undefined&&input.generator!==undefined&&(input.generator.name!=="@actuarial-ts/compliance"||input.generator.version!==COMPLIANCE_PACKAGE_VERSION))throw new ComplianceError("BAD_DIAGNOSTIC_RUN","Wrapped diagnostic bundles require the actual compliance generator stamp","$.generator")}
+    body["diagnosticRuns"] = input.diagnosticRuns;
+  }
   const payload = canonicalJson(body);
   const inner: ReproducibilityBundle = { payload, hash: fnv1a64(payload) };
   if (input.wrap === undefined) return inner;
@@ -184,10 +182,19 @@ export function createBundle(input: CreateBundleInput): ReproducibilityBundle |
   // tag is fnv1a64(canonicalJson({ bundle, interchange })) — exactly
   // interchange's semanticBodyOf for kind "bundle" (spec 3.2).
   const bundleSegment: Record<string, unknown> = { hash: inner.hash, payload: inner.payload };
+  const definitions = new Map<string, DiagnosticDefinitionDoc>();
+  for (const run of input.diagnosticRuns ?? []) {
+    const compiled = verifiedDefinitionForBundle(run);
+    definitions.set(run.definitionIdentities.definition, diagnosticDefinitionToDoc(compiled, {
+      createdAt: input.createdAt,
+      generator: { name: "@actuarial-ts/compliance", version: COMPLIANCE_PACKAGE_VERSION },
+    }));
+  }
   const interchange = {
     triangles: [...input.wrap.triangles],
     selections: [...input.wrap.selections],
     results: [...input.wrap.results],
+    ...(definitions.size === 0 ? {} : { diagnosticDefinitions: [...definitions.values()].sort((a,b)=>a.diagnosticDefinition.identities.definition<b.diagnosticDefinition.identities.definition?-1:1) }),
   };
   const wrapped: WrappedBundleDoc = {
     interchangeVersion: WRAPPED_BUNDLE_INTERCHANGE_VERSION,