@agentplat/mesh 0.3.0-alpha.2 → 0.3.0-alpha.4

package/dist/trust.d.ts

@@ -0,0 +1,212 @@
+/**
+ * Server-only, opt-in bridge between authenticated Mesh envelopes and Trust.
+ * It is deliberately not exported by the Mesh root entrypoint.
+ */
+import type { MeshCryptoPolicy, MeshKeyResolver } from "@agentplat/mesh-crypto";
+import { type MeshProtocolOptions, type SignedMeshEnvelope, type VerifiedMeshEnvelope } from "@agentplat/mesh-protocol";
+import { type EvidenceScopeV1, type EvidenceRecordV1, type EvidenceTrustRestoreOptionsV1, type EvidenceTrustRollbackAnchorV1, type EvidenceTrustSnapshotProtectorV1, type EvidenceTrustSnapshotV1, type EvidenceTrustStateV1, type TrustEligibilityRequirementV1, type TrustObservationV1, type TrustReasonCodeV1 } from "@agentplat/trust";
+type MeshTrustPayloadV1 = Extract<SignedMeshEnvelope["payload"], {
+    readonly type: "evidence.claim";
+}> | Extract<SignedMeshEnvelope["payload"], {
+    readonly type: "evidence.attest";
+}> | Extract<SignedMeshEnvelope["payload"], {
+    readonly type: "evidence.challenge";
+}> | Extract<SignedMeshEnvelope["payload"], {
+    readonly type: "evidence.retract";
+}> | Extract<SignedMeshEnvelope["payload"], {
+    readonly type: "trust.observation";
+}>;
+export type MeshEvidenceInboundRejectionCodeV1 = "invalid_request" | "unsupported_message_type" | "scope_mismatch" | "audience_mismatch" | "crypto_rejected" | "normalization_failed" | "authorization_rejected" | "replay_rejected" | "trust_transition_rejected";
+/** Retained only in the authenticated composite Mesh state/journal. */
+export interface MeshEvidenceOriginProofV1 {
+    readonly schemaVersion: 1;
+    readonly messageId: string;
+    readonly payloadHash: string;
+    readonly signedEnvelopeDigest: string;
+    readonly senderPeerId: string;
+    readonly senderKeyId: string;
+    readonly admissionStateDigest: string;
+    readonly coordinationAuthorityDigests: readonly string[];
+    readonly replayStateDigest: string;
+    readonly normalizedRecordId: string;
+    readonly normalizedRecordDigest: string;
+    readonly originProofDigest: string;
+}
+/** Authenticated composite journal material retained for network-free restore. */
+export interface MeshEvidenceOriginJournalEntryV1 {
+    readonly schemaVersion: 1;
+    readonly descriptor: MeshEvidenceOriginProofV1;
+    readonly canonicalSignedEnvelope: string;
+}
+/**
+ * A construction-bound adapter. It owns accepted admission, Objective/Work,
+ * role and replay projections and must perform its Trust transition atomically.
+ */
+export interface MeshEvidenceInboundPreparationBaseV1 {
+    readonly accepted: true;
+    readonly admissionStateDigest: string;
+    readonly coordinationAuthorityDigests: readonly string[];
+    readonly replayStateDigest: string;
+    readonly observationCorrelated: boolean;
+    readonly effectiveAtLogicalMs: number;
+}
+export interface MeshEvidenceInboundAdapterV1<TState, TPreparation extends MeshEvidenceInboundPreparationBaseV1 = MeshEvidenceInboundPreparationBaseV1> {
+    readonly bindingDigest: string;
+    prepare(input: {
+        readonly state: TState;
+        readonly envelope: VerifiedMeshEnvelope<MeshTrustPayloadV1>;
+        readonly receivedAt: number;
+    }): TPreparation | {
+        readonly accepted: false;
+        readonly code: "authorization_rejected" | "replay_rejected";
+    };
+    process(input: {
+        readonly state: TState;
+        readonly envelope: VerifiedMeshEnvelope<MeshTrustPayloadV1>;
+        readonly verifiedKeyId: string;
+        readonly receivedAt: number;
+        readonly record?: EvidenceRecordV1;
+        readonly observation?: TrustObservationV1;
+        readonly observationCorrelated?: boolean;
+        readonly origin: MeshEvidenceOriginProofV1;
+        readonly originBindingDigest: string;
+        readonly originVerifierBindingDigest: string;
+        readonly preparation: TPreparation;
+    }): {
+        readonly accepted: true;
+        readonly duplicate: boolean;
+        readonly state: TState;
+    } | {
+        readonly accepted: false;
+        readonly code: "authorization_rejected" | "replay_rejected" | "trust_transition_rejected";
+        readonly state: TState;
+    };
+}
+export interface MeshEvidenceInboundRuntimeStateV1<TState> {
+    readonly schemaVersion: 1;
+    readonly identity: {
+        readonly tenantId: string;
+        readonly meshId: string;
+        readonly peerId: string;
+    };
+    readonly state: TState;
+}
+/** Concrete composite retained by the server-only adapter. */
+export interface MeshEvidenceTrustCompositeStateV1<TAuthorizationState = unknown> {
+    readonly authorizationState: TAuthorizationState;
+    readonly trust: EvidenceTrustStateV1;
+    readonly originProofs: Readonly<Record<string, MeshEvidenceOriginJournalEntryV1>>;
+    readonly remoteObservations: Readonly<Record<string, {
+        readonly observation: TrustObservationV1;
+        readonly correlated: boolean;
+    }>>;
+}
+/**
+ * The surrounding Mesh runtime supplies one immutable, construction-bound
+ * authorization/replay transaction. It must validate admission, topic/direct
+ * audience, Objective/Work revision, epoch, authority, fence, source role and
+ * causation before returning its projection digests.
+ */
+export interface MeshEvidenceTrustPreparationV1<TAuthorizationState> extends MeshEvidenceInboundPreparationBaseV1 {
+    readonly nextAuthorizationState: TAuthorizationState;
+}
+export interface MeshEvidenceTrustAuthorizationV1<TAuthorizationState> {
+    prepare(input: {
+        readonly authorizationState: TAuthorizationState;
+        readonly envelope: VerifiedMeshEnvelope<MeshTrustPayloadV1>;
+        readonly receivedAt: number;
+    }): MeshEvidenceTrustPreparationV1<TAuthorizationState> | {
+        readonly accepted: false;
+        readonly code: "authorization_rejected" | "replay_rejected";
+    };
+}
+/** Creates the Trust reducer adapter; no direct payload route exists. */
+export declare function createMeshEvidenceTrustAdapterV1<TAuthorizationState>(bindingDigest: string, originVerifierBindingDigest: string, authorization: MeshEvidenceTrustAuthorizationV1<TAuthorizationState>): MeshEvidenceInboundAdapterV1<MeshEvidenceTrustCompositeStateV1<TAuthorizationState>, MeshEvidenceTrustPreparationV1<TAuthorizationState>>;
+export interface MeshEvidenceInboundProcessorOptionsV1<TState, TPreparation extends MeshEvidenceInboundPreparationBaseV1 = MeshEvidenceInboundPreparationBaseV1> {
+    readonly resolver: MeshKeyResolver;
+    readonly cryptoPolicy: MeshCryptoPolicy;
+    readonly adapter: MeshEvidenceInboundAdapterV1<TState, TPreparation>;
+    readonly originVerifierBindingDigest: string;
+    readonly crypto?: Crypto;
+    readonly protocolOptions?: MeshProtocolOptions;
+    readonly supportedCriticalExtensions?: readonly string[];
+}
+export interface MeshEvidenceInboundRequestV1 {
+    readonly envelope: SignedMeshEnvelope;
+    readonly verifiedAt: string;
+    readonly receivedAt: number;
+}
+export type MeshEvidenceInboundDecisionV1<TState> = {
+    readonly accepted: true;
+    readonly duplicate: boolean;
+    readonly observation: boolean;
+    readonly state: MeshEvidenceInboundRuntimeStateV1<TState>;
+} | {
+    readonly accepted: false;
+    readonly code: MeshEvidenceInboundRejectionCodeV1;
+    readonly state: MeshEvidenceInboundRuntimeStateV1<TState>;
+};
+export interface MeshEvidenceInboundProcessorV1<TState> {
+    process(state: MeshEvidenceInboundRuntimeStateV1<TState>, request: MeshEvidenceInboundRequestV1): Promise<MeshEvidenceInboundDecisionV1<TState>>;
+}
+/** Creates the only Mesh route allowed to create a `verified_mesh` record. */
+export declare function createMeshEvidenceInboundProcessorV1<TState, TPreparation extends MeshEvidenceInboundPreparationBaseV1 = MeshEvidenceInboundPreparationBaseV1>(options: MeshEvidenceInboundProcessorOptionsV1<TState, TPreparation>): MeshEvidenceInboundProcessorV1<TState>;
+/** Validates retained descriptor + exact canonical signed-envelope bytes. */
+export declare function validateMeshEvidenceOriginJournalEntryV1(value: unknown): value is MeshEvidenceOriginJournalEntryV1;
+export type MeshTrustEligibilityModeV1 = "observe" | "restrict";
+export interface MeshTrustCandidateV1 {
+    readonly peerId: string;
+    readonly capabilities: readonly unknown[];
+}
+export interface MeshTrustEligibilityResolverV1 {
+    readonly bindingDigest: string;
+    evaluate(candidate: MeshTrustCandidateV1): "eligible" | "restricted" | "quarantined" | "unavailable";
+}
+export declare function filterMeshCapabilityMatchesWithTrustV1<T extends MeshTrustCandidateV1>(candidates: readonly T[], mode: MeshTrustEligibilityModeV1, resolver: MeshTrustEligibilityResolverV1): {
+    readonly matches: readonly T[];
+    readonly diagnostics: readonly {
+        readonly peerId: string;
+        readonly status: ReturnType<MeshTrustEligibilityResolverV1["evaluate"]>;
+    }[];
+    readonly unavailable: boolean;
+};
+export declare const MESH_PEER_SUBJECT_MAPPING_DIGEST_V1: string;
+export interface MeshTrustStateEligibilityConfigV1 {
+    readonly schemaVersion: 1;
+    readonly mode: MeshTrustEligibilityModeV1;
+    readonly logicalTimeMs: number;
+    readonly scope: EvidenceScopeV1;
+    readonly policyId: string;
+    readonly policyVersion: number;
+    readonly policyDigest: string;
+    readonly maximumProfileAgeMs: number;
+    readonly requirements: readonly TrustEligibilityRequirementV1[];
+    readonly subjectMappingDigest: string;
+    readonly meshEligibilityBindingDigest: string;
+    readonly profileResolverBindingDigest: string;
+}
+export interface MeshTrustStateEligibilityDiagnosticV1 {
+    readonly peerId: string;
+    readonly disposition: "eligible" | "restricted" | "quarantined" | "unavailable";
+    readonly eligibilityDecisionId: string | null;
+    readonly reasonCodes: readonly TrustReasonCodeV1[];
+}
+export interface MeshTrustStateEligibilityResultV1<T extends MeshTrustCandidateV1> {
+    readonly matches: readonly T[];
+    readonly diagnostics: readonly MeshTrustStateEligibilityDiagnosticV1[];
+    readonly unavailable: boolean;
+}
+export type MeshTrustEligibilityRuntimeStateV1<TAuthorizationState = unknown> = MeshEvidenceInboundRuntimeStateV1<MeshEvidenceTrustCompositeStateV1<TAuthorizationState>>;
+/**
+ * Reconstructs the Trust member of a Mesh transaction only through the strict
+ * authenticated snapshot boundary. The caller must supply its current trusted
+ * external rollback anchor; structural Trust validation alone is insufficient.
+ */
+export declare function restoreMeshTrustEligibilityRuntimeStateV1<TAuthorizationState>(current: MeshTrustEligibilityRuntimeStateV1<TAuthorizationState>, snapshot: EvidenceTrustSnapshotV1, anchor: EvidenceTrustRollbackAnchorV1, protector: EvidenceTrustSnapshotProtectorV1, options?: EvidenceTrustRestoreOptionsV1): MeshTrustEligibilityRuntimeStateV1<TAuthorizationState>;
+export declare function createMeshTrustStateEligibilityConfigV1(value: MeshTrustStateEligibilityConfigV1): MeshTrustStateEligibilityConfigV1;
+export declare function digestMeshTrustStateEligibilityConfigV1(value: MeshTrustStateEligibilityConfigV1): string;
+export declare function filterMeshCapabilityMatchesWithTrustStateV1<T extends MeshTrustCandidateV1, TAuthorizationState = unknown>(candidates: readonly T[], current: MeshTrustEligibilityRuntimeStateV1<TAuthorizationState>, configValue: MeshTrustStateEligibilityConfigV1): MeshTrustStateEligibilityResultV1<T>;
+/** Encodes only the already-redacted projection; it never exports a profile or Fusion input. */
+export declare function encodeMeshTrustObservationV1(observation: TrustObservationV1): Readonly<Record<string, unknown>>;
+export {};
+//# sourceMappingURL=trust.d.ts.map

package/dist/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEhF,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAC1B,MAAM,0BAA0B,CAAC;AAQlC,OAAO,EAiBL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EAClC,KAAK,6BAA6B,EAClC,KAAK,gCAAgC,EACrC,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EAEzB,KAAK,6BAA6B,EAClC,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAwB1B,KAAK,kBAAkB,GACnB,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC,GAC3E,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC,GAC5E,OAAO,CACL,kBAAkB,CAAC,SAAS,CAAC,EAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,CACxC,GACD,OAAO,CACL,kBAAkB,CAAC,SAAS,CAAC,EAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,CACtC,GACD,OAAO,CACL,kBAAkB,CAAC,SAAS,CAAC,EAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,CACvC,CAAC;AAEN,MAAM,MAAM,kCAAkC,GAC1C,iBAAiB,GACjB,0BAA0B,GAC1B,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,sBAAsB,GACtB,wBAAwB,GACxB,iBAAiB,GACjB,2BAA2B,CAAC;AAEhC,uEAAuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,4BAA4B,EAAE,SAAS,MAAM,EAAE,CAAC;IACzD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED,kFAAkF;AAClF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,4BAA4B,EAAE,SAAS,MAAM,EAAE,CAAC;IACzD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,4BAA4B,CAC3C,MAAM,EACN,YAAY,SAAS,oCAAoC,GACvD,oCAAoC;IAEtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,GACG,YAAY,GACZ;QACE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,wBAAwB,GAAG,iBAAiB,CAAC;KAC7D,CAAC;IACN,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QAC5D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;QACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;QAC1C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;QACzC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;QAC7C,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;KACpC,GACG;QACE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,GACD;QACE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;QACzB,QAAQ,CAAC,IAAI,EACT,wBAAwB,GACxB,iBAAiB,GACjB,2BAA2B,CAAC;QAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;CACP;AAED,MAAM,WAAW,iCAAiC,CAAC,MAAM;IACvD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,8DAA8D;AAC9D,MAAM,WAAW,iCAAiC,CAChD,mBAAmB,GAAG,OAAO;IAE7B,QAAQ,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAC7B,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CACjD,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CACnC,MAAM,CACJ,MAAM,EACN;QAAE,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;KAAE,CAC3E,CACF,CAAC;CACH;AAED;;;;;GAKG;AACH,MAAM,WAAW,8BAA8B,CAC7C,mBAAmB,CACnB,SAAQ,oCAAoC;IAC5C,QAAQ,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;CACtD;AAED,MAAM,WAAW,gCAAgC,CAAC,mBAAmB;IACnE,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;QACjD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,GACG,8BAA8B,CAAC,mBAAmB,CAAC,GACnD;QACE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,wBAAwB,GAAG,iBAAiB,CAAC;KAC7D,CAAC;CACP;AAED,yEAAyE;AACzE,wBAAgB,gCAAgC,CAAC,mBAAmB,EAClE,aAAa,EAAE,MAAM,EACrB,2BAA2B,EAAE,MAAM,EACnC,aAAa,EAAE,gCAAgC,CAAC,mBAAmB,CAAC,GACnE,4BAA4B,CAC7B,iCAAiC,CAAC,mBAAmB,CAAC,EACtD,8BAA8B,CAAC,mBAAmB,CAAC,CACpD,CAkMA;AAED,MAAM,WAAW,qCAAqC,CACpD,MAAM,EACN,YAAY,SAAS,oCAAoC,GACvD,oCAAoC;IAEtC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrE,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC;IAC/C,QAAQ,CAAC,2BAA2B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1D;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,6BAA6B,CAAC,MAAM,IAC5C;IACE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC,MAAM,CAAC,CAAC;CAC3D,GACD;IACE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC,MAAM,CAAC,CAAC;CAC3D,CAAC;AAEN,MAAM,WAAW,8BAA8B,CAAC,MAAM;IACpD,OAAO,CACL,KAAK,EAAE,iCAAiC,CAAC,MAAM,CAAC,EAChD,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC,CAAC;CACnD;AAED,8EAA8E;AAC9E,wBAAgB,oCAAoC,CAClD,MAAM,EACN,YAAY,SAAS,oCAAoC,GACvD,oCAAoC,EAEtC,OAAO,EAAE,qCAAqC,CAAC,MAAM,EAAE,YAAY,CAAC,GACnE,8BAA8B,CAAC,MAAM,CAAC,CAgNxC;AAyID,6EAA6E;AAC7E,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,gCAAgC,CA0F3C;AA0HD,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,UAAU,CAAC;AAChE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,SAAS,OAAO,EAAE,CAAC;CAC3C;AACD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CACN,SAAS,EAAE,oBAAoB,GAC9B,UAAU,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,CAAC;CAC9D;AACD,wBAAgB,sCAAsC,CACpD,CAAC,SAAS,oBAAoB,EAE9B,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,IAAI,EAAE,0BAA0B,EAChC,QAAQ,EAAE,8BAA8B,GACvC;IACD,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,SAAS;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,8BAA8B,CAAC,UAAU,CAAC,CAAC,CAAC;KACzE,EAAE,CAAC;IACJ,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B,CAwCA;AAED,eAAO,MAAM,mCAAmC,QAO/C,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAChE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;CAC/C;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAClB,UAAU,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,CAAC;IAC5D,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACpD;AAED,MAAM,WAAW,iCAAiC,CAChD,CAAC,SAAS,oBAAoB;IAE9B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,SAAS,qCAAqC,EAAE,CAAC;IACvE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,MAAM,kCAAkC,CAAC,mBAAmB,GAAG,OAAO,IAC1E,iCAAiC,CAC/B,iCAAiC,CAAC,mBAAmB,CAAC,CACvD,CAAC;AAEJ;;;;GAIG;AACH,wBAAgB,yCAAyC,CAAC,mBAAmB,EAC3E,OAAO,EAAE,kCAAkC,CAAC,mBAAmB,CAAC,EAChE,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,6BAA6B,EACrC,SAAS,EAAE,gCAAgC,EAC3C,OAAO,GAAE,6BAAkC,GAC1C,kCAAkC,CAAC,mBAAmB,CAAC,CAgDzD;AAiBD,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,iCAAiC,GACvC,iCAAiC,CAkEnC;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,iCAAiC,GACvC,MAAM,CAaR;AAgED,wBAAgB,2CAA2C,CACzD,CAAC,SAAS,oBAAoB,EAC9B,mBAAmB,GAAG,OAAO,EAE7B,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,OAAO,EAAE,kCAAkC,CAAC,mBAAmB,CAAC,EAChE,WAAW,EAAE,iCAAiC,GAC7C,iCAAiC,CAAC,CAAC,CAAC,CA0HtC;AAED,gGAAgG;AAChG,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,kBAAkB,GAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAenC"}

package/dist/trust.js

@@ -0,0 +1,934 @@
+import { verifyMeshEnvelope } from "@agentplat/mesh-crypto";
+import { canonicalizeMeshJson, validateMeshEnvelopeContext, } from "@agentplat/mesh-protocol";
+import { normalizeMeshEvidenceAttestationV1, normalizeMeshEvidenceChallengeV1, normalizeMeshEvidenceClaimV1, normalizeMeshEvidenceRetractionV1, normalizeMeshTrustObservationV1, } from "@agentplat/trust/mesh-records";
+import { assertExactKeys, assertIdentifier, assertSafeInteger, assertTrustDigest, createTrustEligibilityRequestV1, deepFreeze, digestScopeV1, digestSubjectV1, digestTrustProfileKeyV1, digestTrustJsonV1, evaluateTrustEligibilityV1, reduceEvidenceTrustStateV1, restoreEvidenceTrustSnapshotV1, sha256TrustBytesV1, validateEvidenceScopeV1, validateEvidenceTrustStateV1, } from "@agentplat/trust";
+const trustDigestPattern = /^[0-9a-f]{64}$/;
+const maximumOriginProofs = 4_096;
+const maximumRemoteObservations = 4_096;
+const maximumAuthorityDigests = 32;
+const maximumEligibilityStateIdentities = 4_096;
+/** Unforgeable, adapter-bound handoff from the verified processor. */
+const concreteAdapterCapabilities = new WeakMap();
+const authorizedAdapterInvocations = new WeakMap();
+const verifiedEligibilityRuntimeStates = new WeakMap();
+const latestEligibilitySnapshotByStateId = new Map();
+/** Creates the Trust reducer adapter; no direct payload route exists. */
+export function createMeshEvidenceTrustAdapterV1(bindingDigest, originVerifierBindingDigest, authorization) {
+    if (!trustDigestPattern.test(bindingDigest) ||
+        !trustDigestPattern.test(originVerifierBindingDigest) ||
+        !authorization ||
+        typeof authorization !== "object" ||
+        typeof authorization.prepare !== "function") {
+        throw new TypeError("Mesh Evidence Trust adapter bindings are invalid");
+    }
+    const prepare = authorization.prepare.bind(authorization);
+    const adapterCapability = Object.freeze({});
+    const adapter = {
+        bindingDigest,
+        prepare: (input) => {
+            const result = prepare({
+                authorizationState: input.state.authorizationState,
+                envelope: input.envelope,
+                receivedAt: input.receivedAt,
+            });
+            if (!result || typeof result !== "object" || result.accepted !== true)
+                return result;
+            return Object.freeze({
+                accepted: true,
+                nextAuthorizationState: result.nextAuthorizationState,
+                admissionStateDigest: result.admissionStateDigest,
+                coordinationAuthorityDigests: Object.freeze([
+                    ...result.coordinationAuthorityDigests,
+                ]),
+                replayStateDigest: result.replayStateDigest,
+                observationCorrelated: result.observationCorrelated,
+                effectiveAtLogicalMs: result.effectiveAtLogicalMs,
+            });
+        },
+        process: (input) => {
+            if (!input ||
+                typeof input !== "object" ||
+                authorizedAdapterInvocations.get(input) !== adapterCapability) {
+                return {
+                    accepted: false,
+                    code: "trust_transition_rejected",
+                    state: input?.state,
+                };
+            }
+            authorizedAdapterInvocations.delete(input);
+            let originEntry;
+            try {
+                originEntry = createOriginJournalEntry(input.origin, input.envelope);
+            }
+            catch {
+                return {
+                    accepted: false,
+                    code: "trust_transition_rejected",
+                    state: input.state,
+                };
+            }
+            if (!Object.hasOwn(input.state.originProofs, input.origin.originProofDigest) &&
+                Object.keys(input.state.originProofs).length >= maximumOriginProofs) {
+                return {
+                    accepted: false,
+                    code: "trust_transition_rejected",
+                    state: input.state,
+                };
+            }
+            const originProofs = {
+                ...input.state.originProofs,
+                [input.origin.originProofDigest]: originEntry,
+            };
+            if (input.observation !== undefined) {
+                if (!Object.hasOwn(input.state.remoteObservations, input.observation.observationId) &&
+                    Object.keys(input.state.remoteObservations).length >=
+                        maximumRemoteObservations) {
+                    return {
+                        accepted: false,
+                        code: "trust_transition_rejected",
+                        state: input.state,
+                    };
+                }
+                const remoteObservations = {
+                    ...input.state.remoteObservations,
+                    [input.observation.observationId]: Object.freeze({
+                        observation: input.observation,
+                        correlated: input.observationCorrelated === true,
+                    }),
+                };
+                return {
+                    accepted: true,
+                    duplicate: Object.hasOwn(input.state.remoteObservations, input.observation.observationId),
+                    state: Object.freeze({
+                        ...input.state,
+                        authorizationState: input.preparation.nextAuthorizationState,
+                        originProofs: Object.freeze(originProofs),
+                        remoteObservations: Object.freeze(remoteObservations),
+                    }),
+                };
+            }
+            try {
+                const record = input.record;
+                const recordId = evidenceRecordId(record);
+                const recordDigest = recordId.slice(recordId.indexOf(":") + 1);
+                const reduced = reduceEvidenceTrustStateV1(input.state.trust, {
+                    schemaVersion: 1,
+                    kind: "record_admitted",
+                    record,
+                    origin: "verified_mesh",
+                    originBindingDigest: input.originBindingDigest,
+                    originVerifierBindingDigest: input.originVerifierBindingDigest,
+                    originProofDigest: input.origin.originProofDigest,
+                    effectiveAtLogicalMs: input.preparation.effectiveAtLogicalMs,
+                    logicalTimeMs: input.receivedAt,
+                }, {
+                    verifiedMeshAdmissionVerifierRegistry: {
+                        resolve: (binding) => binding !== originVerifierBindingDigest
+                            ? null
+                            : {
+                                verifierBindingDigest: originVerifierBindingDigest,
+                                upstreamBindingDigest: input.originBindingDigest,
+                                verify: (candidate) => {
+                                    const proofEntry = originProofs[candidate.originProofDigest];
+                                    const proof = proofEntry?.descriptor;
+                                    return (proof !== undefined &&
+                                        validateOriginJournalEntry(proofEntry) &&
+                                        candidate.originBindingDigest ===
+                                            input.originBindingDigest &&
+                                        candidate.originVerifierBindingDigest ===
+                                            originVerifierBindingDigest &&
+                                        candidate.recordId === recordId &&
+                                        candidate.recordDigest === recordDigest &&
+                                        candidate.effectiveAtLogicalMs ===
+                                            input.preparation.effectiveAtLogicalMs &&
+                                        proof.normalizedRecordId === recordId &&
+                                        proof.normalizedRecordDigest === recordDigest);
+                                },
+                            },
+                    },
+                });
+                const duplicate = reduced.effects.some((effect) => effect.reasonCode === "duplicate");
+                return {
+                    accepted: true,
+                    duplicate,
+                    state: Object.freeze({
+                        ...input.state,
+                        authorizationState: input.preparation.nextAuthorizationState,
+                        trust: reduced.state,
+                        originProofs: Object.freeze(originProofs),
+                    }),
+                };
+            }
+            catch {
+                return {
+                    accepted: false,
+                    code: "trust_transition_rejected",
+                    state: input.state,
+                };
+            }
+        },
+    };
+    const frozenAdapter = Object.freeze(adapter);
+    concreteAdapterCapabilities.set(frozenAdapter, adapterCapability);
+    return frozenAdapter;
+}
+/** Creates the only Mesh route allowed to create a `verified_mesh` record. */
+export function createMeshEvidenceInboundProcessorV1(options) {
+    if (!options ||
+        typeof options !== "object" ||
+        !options.adapter ||
+        !options.resolver ||
+        typeof options.resolver.resolve !== "function" ||
+        !options.cryptoPolicy ||
+        !Array.isArray(options.cryptoPolicy.allowedAlgorithms) ||
+        options.cryptoPolicy.allowedAlgorithms.length === 0 ||
+        typeof options.adapter.prepare !== "function" ||
+        typeof options.adapter.process !== "function" ||
+        !trustDigestPattern.test(options.adapter.bindingDigest) ||
+        !trustDigestPattern.test(options.originVerifierBindingDigest)) {
+        throw new TypeError("Mesh Evidence inbound dependencies are required");
+    }
+    const adapterCapability = concreteAdapterCapabilities.get(options.adapter);
+    const resolver = Object.freeze({
+        resolve: options.resolver.resolve.bind(options.resolver),
+    });
+    const policy = Object.freeze({
+        allowedAlgorithms: Object.freeze([
+            ...options.cryptoPolicy.allowedAlgorithms,
+        ]),
+    });
+    const configuration = Object.freeze({
+        resolver,
+        policy,
+        adapter: Object.freeze({
+            bindingDigest: options.adapter.bindingDigest,
+            prepare: options.adapter.prepare.bind(options.adapter),
+            process: options.adapter.process.bind(options.adapter),
+        }),
+        originVerifierBindingDigest: options.originVerifierBindingDigest,
+        crypto: options.crypto,
+        protocolOptions: options.protocolOptions,
+        supportedCriticalExtensions: options.supportedCriticalExtensions === undefined
+            ? undefined
+            : Object.freeze([...options.supportedCriticalExtensions]),
+        adapterCapability,
+    });
+    const processor = {
+        async process(state, request) {
+            if (!state ||
+                !request ||
+                typeof request !== "object" ||
+                !Number.isSafeInteger(request.receivedAt) ||
+                request.receivedAt < 0)
+                return reject(state, "invalid_request");
+            if (!isRuntimeState(state))
+                return reject(state, "invalid_request");
+            const contextual = validateMeshEnvelopeContext(request.envelope, {
+                tenantId: state.identity.tenantId,
+                meshId: state.identity.meshId,
+                peerId: state.identity.peerId,
+                receivedAt: request.verifiedAt,
+                ...(configuration.supportedCriticalExtensions === undefined
+                    ? {}
+                    : {
+                        supportedCriticalExtensions: configuration.supportedCriticalExtensions,
+                    }),
+            }, configuration.protocolOptions);
+            if (!contextual.ok)
+                return reject(state, contextual.issues[0]?.code === "invalid_audience"
+                    ? "audience_mismatch"
+                    : "scope_mismatch");
+            if (!isTrustPayload(contextual.value.payload))
+                return reject(state, "unsupported_message_type");
+            let verification;
+            try {
+                verification = await verifyMeshEnvelope({
+                    envelope: request.envelope,
+                    resolver: configuration.resolver,
+                    policy: configuration.policy,
+                    verifiedAt: request.verifiedAt,
+                    crypto: configuration.crypto,
+                    protocolOptions: configuration.protocolOptions,
+                });
+            }
+            catch {
+                return reject(state, "crypto_rejected");
+            }
+            if (!verification.verified)
+                return reject(state, "crypto_rejected");
+            const envelope = verification.envelope;
+            const normalized = normalize(envelope);
+            if (!normalized)
+                return reject(state, "normalization_failed");
+            let prepared;
+            try {
+                prepared = configuration.adapter.prepare({
+                    state: state.state,
+                    envelope,
+                    receivedAt: request.receivedAt,
+                });
+            }
+            catch {
+                return reject(state, "authorization_rejected");
+            }
+            let acceptedPreparation;
+            let preparationSecurity;
+            try {
+                if (!prepared || typeof prepared !== "object")
+                    return reject(state, "authorization_rejected");
+                const accepted = prepared.accepted;
+                if (accepted !== true) {
+                    const code = prepared.code;
+                    if (accepted === false &&
+                        (code === "authorization_rejected" || code === "replay_rejected"))
+                        return Object.freeze({ accepted: false, code, state });
+                    return reject(state, "authorization_rejected");
+                }
+                preparationSecurity = Object.freeze({
+                    accepted: true,
+                    admissionStateDigest: prepared.admissionStateDigest,
+                    coordinationAuthorityDigests: Object.freeze([
+                        ...prepared.coordinationAuthorityDigests,
+                    ]),
+                    replayStateDigest: prepared.replayStateDigest,
+                    observationCorrelated: prepared.observationCorrelated,
+                    effectiveAtLogicalMs: prepared.effectiveAtLogicalMs,
+                });
+                if (!isValidPreparation(preparationSecurity, envelope, request.receivedAt))
+                    return reject(state, "authorization_rejected");
+                acceptedPreparation = prepared;
+            }
+            catch {
+                return reject(state, "authorization_rejected");
+            }
+            let origin;
+            try {
+                origin = createOriginProof(envelope, verification.key.keyId, normalized.record === undefined
+                    ? normalized.observation.observationId
+                    : evidenceRecordId(normalized.record), preparationSecurity);
+            }
+            catch {
+                return reject(state, "normalization_failed");
+            }
+            const adapterInput = Object.freeze({
+                state: state.state,
+                envelope,
+                verifiedKeyId: verification.key.keyId,
+                receivedAt: request.receivedAt,
+                ...(normalized.record === undefined
+                    ? { observation: normalized.observation }
+                    : { record: normalized.record }),
+                ...(normalized.observation === undefined
+                    ? {}
+                    : {
+                        observationCorrelated: preparationSecurity.observationCorrelated,
+                    }),
+                origin,
+                originBindingDigest: configuration.adapter.bindingDigest,
+                originVerifierBindingDigest: configuration.originVerifierBindingDigest,
+                preparation: acceptedPreparation,
+            });
+            let transition;
+            if (configuration.adapterCapability !== undefined)
+                authorizedAdapterInvocations.set(adapterInput, configuration.adapterCapability);
+            try {
+                transition = configuration.adapter.process(adapterInput);
+            }
+            catch {
+                return reject(state, "trust_transition_rejected");
+            }
+            finally {
+                authorizedAdapterInvocations.delete(adapterInput);
+            }
+            if (!transition || typeof transition !== "object")
+                return reject(state, "trust_transition_rejected");
+            if (!isValidAdapterTransition(transition, state.state))
+                return reject(state, "trust_transition_rejected");
+            if (!transition.accepted)
+                return Object.freeze({
+                    accepted: false,
+                    code: transition.code,
+                    state,
+                });
+            return Object.freeze({
+                accepted: true,
+                duplicate: transition.duplicate,
+                observation: normalized.observation !== undefined,
+                state: freezeState(state, transition.state),
+            });
+        },
+    };
+    return Object.freeze(processor);
+}
+function normalize(envelope) {
+    const material = {
+        schemaVersion: 1,
+        tenantId: envelope.tenantId,
+        meshId: envelope.meshId,
+        objectiveId: envelope.objectiveId ?? null,
+        senderPeerId: envelope.sender.peerId,
+        causationId: envelope.causationId ?? null,
+    };
+    try {
+        switch (envelope.payload.type) {
+            case "evidence.claim": {
+                const record = normalizeMeshEvidenceClaimV1(material, omit(envelope.payload, ["type", "claimId", "assertionDigest"]));
+                return record.claimId === envelope.payload.claimId &&
+                    record.assertionDigest === envelope.payload.assertionDigest
+                    ? { record }
+                    : undefined;
+            }
+            case "evidence.attest": {
+                const record = normalizeMeshEvidenceAttestationV1(material, omit(envelope.payload, ["type", "attestationId"]));
+                return record.attestationId === envelope.payload.attestationId
+                    ? { record }
+                    : undefined;
+            }
+            case "evidence.challenge": {
+                const record = normalizeMeshEvidenceChallengeV1(material, omit(envelope.payload, ["type", "challengeId"]));
+                return record.challengeId === envelope.payload.challengeId
+                    ? { record }
+                    : undefined;
+            }
+            case "evidence.retract": {
+                const record = normalizeMeshEvidenceRetractionV1(material, omit(envelope.payload, ["type", "retractionId"]));
+                return record.retractionId === envelope.payload.retractionId
+                    ? { record }
+                    : undefined;
+            }
+            case "trust.observation": {
+                const observation = normalizeMeshTrustObservationV1(material, omit(envelope.payload, ["type", "observationId"]));
+                return observation.observationId === envelope.payload.observationId
+                    ? { observation }
+                    : undefined;
+            }
+        }
+    }
+    catch {
+        return undefined;
+    }
+}
+function omit(value, keys) {
+    const result = { ...value };
+    for (const key of keys)
+        delete result[key];
+    return result;
+}
+function createOriginProof(envelope, keyId, recordId, security) {
+    const canonical = canonicalizeMeshJson(envelope);
+    if (!canonical.ok)
+        throw new TypeError("verified Mesh envelope is not canonical");
+    const signedEnvelopeDigest = sha256TrustBytesV1(new TextEncoder().encode(canonical.value));
+    const recordDigest = recordId.slice(recordId.indexOf(":") + 1);
+    const descriptor = {
+        schemaVersion: 1,
+        messageId: envelope.messageId,
+        payloadHash: envelope.payloadHash,
+        signedEnvelopeDigest,
+        senderPeerId: envelope.sender.peerId,
+        senderKeyId: keyId,
+        admissionStateDigest: security.admissionStateDigest,
+        coordinationAuthorityDigests: Object.freeze([...security.coordinationAuthorityDigests].sort()),
+        replayStateDigest: security.replayStateDigest,
+        normalizedRecordId: recordId,
+        normalizedRecordDigest: recordDigest,
+    };
+    return Object.freeze({
+        ...descriptor,
+        originProofDigest: digestTrustJsonV1("origin-proof", descriptor),
+    });
+}
+function createOriginJournalEntry(descriptor, envelope) {
+    const canonical = canonicalizeMeshJson(envelope);
+    if (!canonical.ok)
+        throw new TypeError("verified Mesh envelope is not canonical");
+    const entry = Object.freeze({
+        schemaVersion: 1,
+        descriptor,
+        canonicalSignedEnvelope: canonical.value,
+    });
+    if (!validateMeshEvidenceOriginJournalEntryV1(entry))
+        throw new TypeError("Mesh Evidence origin journal entry is invalid");
+    return entry;
+}
+/** Validates retained descriptor + exact canonical signed-envelope bytes. */
+export function validateMeshEvidenceOriginJournalEntryV1(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const entry = value;
+    if (entry.schemaVersion !== 1 ||
+        typeof entry.canonicalSignedEnvelope !== "string" ||
+        !entry.descriptor ||
+        typeof entry.descriptor !== "object" ||
+        Array.isArray(entry.descriptor) ||
+        !hasExactKeys(entry, [
+            "schemaVersion",
+            "descriptor",
+            "canonicalSignedEnvelope",
+        ]))
+        return false;
+    const descriptor = entry.descriptor;
+    if (!hasExactKeys(descriptor, [
+        "schemaVersion",
+        "messageId",
+        "payloadHash",
+        "signedEnvelopeDigest",
+        "senderPeerId",
+        "senderKeyId",
+        "admissionStateDigest",
+        "coordinationAuthorityDigests",
+        "replayStateDigest",
+        "normalizedRecordId",
+        "normalizedRecordDigest",
+        "originProofDigest",
+    ]) ||
+        descriptor.schemaVersion !== 1 ||
+        !trustDigestPattern.test(String(descriptor.signedEnvelopeDigest)) ||
+        !trustDigestPattern.test(String(descriptor.admissionStateDigest)) ||
+        !trustDigestPattern.test(String(descriptor.replayStateDigest)) ||
+        !trustDigestPattern.test(String(descriptor.normalizedRecordDigest)) ||
+        !trustDigestPattern.test(String(descriptor.originProofDigest)) ||
+        !Array.isArray(descriptor.coordinationAuthorityDigests) ||
+        descriptor.coordinationAuthorityDigests.length > maximumAuthorityDigests ||
+        !descriptor.coordinationAuthorityDigests.every((digest) => typeof digest === "string" && trustDigestPattern.test(digest)) ||
+        !descriptor.coordinationAuthorityDigests.every((digest, index, values) => index === 0 || values[index - 1] < digest))
+        return false;
+    for (const key of [
+        "messageId",
+        "payloadHash",
+        "senderPeerId",
+        "senderKeyId",
+        "normalizedRecordId",
+    ])
+        if (typeof descriptor[key] !== "string" || descriptor[key].length === 0)
+            return false;
+    const { originProofDigest: _originProofDigest, ...descriptorBody } = descriptor;
+    if (digestTrustJsonV1("origin-proof", descriptorBody) !== descriptor.originProofDigest)
+        return false;
+    let parsed;
+    try {
+        parsed = JSON.parse(entry.canonicalSignedEnvelope);
+    }
+    catch {
+        return false;
+    }
+    const canonical = canonicalizeMeshJson(parsed);
+    if (!canonical.ok || canonical.value !== entry.canonicalSignedEnvelope)
+        return false;
+    const envelope = parsed;
+    const sender = envelope.sender;
+    const proof = envelope.proof;
+    return (envelope.messageId === descriptor.messageId &&
+        envelope.payloadHash === descriptor.payloadHash &&
+        sender?.peerId === descriptor.senderPeerId &&
+        proof?.keyId === descriptor.senderKeyId &&
+        sha256TrustBytesV1(new TextEncoder().encode(entry.canonicalSignedEnvelope)) === descriptor.signedEnvelopeDigest &&
+        String(descriptor.normalizedRecordId).endsWith(`:${descriptor.normalizedRecordDigest}`));
+}
+function validateOriginJournalEntry(entry) {
+    return validateMeshEvidenceOriginJournalEntryV1(entry);
+}
+function hasExactKeys(value, keys) {
+    const actual = Object.keys(value).sort();
+    const expected = [...keys].sort();
+    return (actual.length === expected.length &&
+        actual.every((key, index) => key === expected[index]));
+}
+function isValidAdapterTransition(value, previousState) {
+    const transition = value;
+    if (transition.accepted === true)
+        return (hasExactKeys(transition, ["accepted", "duplicate", "state"]) &&
+            typeof transition.duplicate === "boolean");
+    return (transition.accepted === false &&
+        hasExactKeys(transition, ["accepted", "code", "state"]) &&
+        [
+            "authorization_rejected",
+            "replay_rejected",
+            "trust_transition_rejected",
+        ].includes(String(transition.code)) &&
+        transition.state === previousState);
+}
+function evidenceRecordId(record) {
+    if ("claimId" in record && "outcome" in record)
+        return record.claimId;
+    if ("attestationId" in record)
+        return record.attestationId;
+    if ("challengeId" in record)
+        return record.challengeId;
+    return record.retractionId;
+}
+function isTrustPayload(payload) {
+    return (payload.type === "evidence.claim" ||
+        payload.type === "evidence.attest" ||
+        payload.type === "evidence.challenge" ||
+        payload.type === "evidence.retract" ||
+        payload.type === "trust.observation");
+}
+function freezeState(state, next) {
+    return Object.freeze({
+        schemaVersion: 1,
+        identity: Object.freeze({ ...state.identity }),
+        state: next,
+    });
+}
+function reject(state, code) {
+    return Object.freeze({ accepted: false, code, state });
+}
+function isRuntimeState(state) {
+    return (state.schemaVersion === 1 &&
+        state.identity !== null &&
+        typeof state.identity === "object" &&
+        typeof state.identity.tenantId === "string" &&
+        typeof state.identity.meshId === "string" &&
+        typeof state.identity.peerId === "string");
+}
+function isValidPreparation(preparation, envelope, receivedAt) {
+    const authorities = preparation.coordinationAuthorityDigests;
+    return (preparation.accepted === true &&
+        trustDigestPattern.test(preparation.admissionStateDigest) &&
+        trustDigestPattern.test(preparation.replayStateDigest) &&
+        Array.isArray(authorities) &&
+        authorities.length <= maximumAuthorityDigests &&
+        authorities.every((digest) => trustDigestPattern.test(digest)) &&
+        authorities.every((digest, index) => index === 0 || authorities[index - 1] < digest) &&
+        typeof preparation.observationCorrelated === "boolean" &&
+        Number.isSafeInteger(preparation.effectiveAtLogicalMs) &&
+        preparation.effectiveAtLogicalMs >= 0 &&
+        preparation.effectiveAtLogicalMs <= receivedAt &&
+        (envelope.payload.scope.kind === "work" ||
+            preparation.effectiveAtLogicalMs === receivedAt));
+}
+export function filterMeshCapabilityMatchesWithTrustV1(candidates, mode, resolver) {
+    if (mode !== "observe" && mode !== "restrict") {
+        throw new TypeError("Mesh Trust eligibility mode is invalid");
+    }
+    if (new Set(candidates.map((candidate) => candidate.peerId)).size !==
+        candidates.length) {
+        throw new TypeError("Mesh Trust candidates must be unique");
+    }
+    const evaluate = resolver.evaluate.bind(resolver);
+    const diagnostics = candidates.map((candidate) => {
+        let status = "unavailable";
+        try {
+            status = evaluate(candidate);
+        }
+        catch {
+            status = "unavailable";
+        }
+        if (!["eligible", "restricted", "quarantined", "unavailable"].includes(status)) {
+            status = "unavailable";
+        }
+        return Object.freeze({ peerId: candidate.peerId, status });
+    });
+    const unavailable = diagnostics.some((item) => item.status === "unavailable");
+    const matches = mode === "observe"
+        ? candidates
+        : unavailable
+            ? []
+            : candidates.filter((_, index) => diagnostics[index].status === "eligible");
+    return Object.freeze({
+        matches: Object.freeze([...matches]),
+        diagnostics: Object.freeze(diagnostics),
+        unavailable,
+    });
+}
+export const MESH_PEER_SUBJECT_MAPPING_DIGEST_V1 = digestTrustJsonV1("mesh-subject-mapping", {
+    schemaVersion: 1,
+    candidateField: "peerId",
+    subjectKind: "peer",
+});
+/**
+ * Reconstructs the Trust member of a Mesh transaction only through the strict
+ * authenticated snapshot boundary. The caller must supply its current trusted
+ * external rollback anchor; structural Trust validation alone is insufficient.
+ */
+export function restoreMeshTrustEligibilityRuntimeStateV1(current, snapshot, anchor, protector, options = {}) {
+    if (!isRuntimeState(current) ||
+        !current.state ||
+        typeof current.state !== "object" ||
+        !Object.hasOwn(current.state, "authorizationState") ||
+        !Object.hasOwn(current.state, "originProofs") ||
+        !Object.hasOwn(current.state, "remoteObservations"))
+        throw new TypeError("Mesh Trust current transaction is invalid");
+    const trust = restoreEvidenceTrustSnapshotV1(snapshot, anchor, protector, options);
+    const prior = latestEligibilitySnapshotByStateId.get(snapshot.stateId);
+    if (!prior &&
+        latestEligibilitySnapshotByStateId.size >= maximumEligibilityStateIdentities)
+        throw new TypeError("Mesh Trust eligibility state capacity exceeded");
+    if (prior &&
+        (snapshot.generation < prior.generation ||
+            (snapshot.generation === prior.generation &&
+                snapshot.snapshotDigest !== prior.digest)))
+        throw new TypeError("Mesh Trust snapshot anchor is not current");
+    latestEligibilitySnapshotByStateId.set(snapshot.stateId, {
+        generation: snapshot.generation,
+        digest: snapshot.snapshotDigest,
+    });
+    const restored = Object.freeze({
+        schemaVersion: 1,
+        identity: Object.freeze({ ...current.identity }),
+        state: Object.freeze({
+            ...current.state,
+            trust,
+        }),
+    });
+    verifiedEligibilityRuntimeStates.set(restored, {
+        stateId: snapshot.stateId,
+        generation: snapshot.generation,
+        digest: snapshot.snapshotDigest,
+        logicalTimeMs: snapshot.createdAtLogicalMs,
+    });
+    return restored;
+}
+const stateEligibilityConfigKeys = [
+    "schemaVersion",
+    "mode",
+    "logicalTimeMs",
+    "scope",
+    "policyId",
+    "policyVersion",
+    "policyDigest",
+    "maximumProfileAgeMs",
+    "requirements",
+    "subjectMappingDigest",
+    "meshEligibilityBindingDigest",
+    "profileResolverBindingDigest",
+];
+export function createMeshTrustStateEligibilityConfigV1(value) {
+    try {
+        assertExactKeys(value, stateEligibilityConfigKeys, "Mesh Trust config");
+        if (value.schemaVersion !== 1 ||
+            (value.mode !== "observe" && value.mode !== "restrict"))
+            throw new TypeError("Mesh Trust config is invalid");
+        assertSafeInteger(value.logicalTimeMs, "logicalTimeMs");
+        assertIdentifier(value.policyId, "policyId");
+        assertSafeInteger(value.policyVersion, "policyVersion", 1);
+        assertTrustDigest(value.policyDigest, "policyDigest");
+        assertTrustDigest(value.subjectMappingDigest, "subjectMappingDigest");
+        assertTrustDigest(value.meshEligibilityBindingDigest, "meshEligibilityBindingDigest");
+        assertTrustDigest(value.profileResolverBindingDigest, "profileResolverBindingDigest");
+        if (value.subjectMappingDigest !== MESH_PEER_SUBJECT_MAPPING_DIGEST_V1 ||
+            value.meshEligibilityBindingDigest === value.profileResolverBindingDigest)
+            throw new TypeError("Mesh Trust config binding is invalid");
+        const scope = validateEvidenceScopeV1(value.scope);
+        if (scope.kind !== "mesh" &&
+            scope.kind !== "objective" &&
+            scope.kind !== "work")
+            throw new TypeError("Mesh Trust scope is invalid");
+        const validationSubject = {
+            schemaVersion: 1,
+            kind: "peer",
+            peerId: "mesh-subject-validation",
+        };
+        const validationProfileDigest = "0".repeat(64);
+        const request = createTrustEligibilityRequestV1({
+            schemaVersion: 1,
+            tenantId: scope.tenantId,
+            subject: validationSubject,
+            subjectDigest: digestSubjectV1(validationSubject),
+            scope,
+            scopeDigest: digestScopeV1(scope),
+            policyId: value.policyId,
+            policyVersion: value.policyVersion,
+            policyDigest: value.policyDigest,
+            profileId: `profile:${validationProfileDigest}`,
+            profileDigest: validationProfileDigest,
+            maximumProfileAgeMs: value.maximumProfileAgeMs,
+            requirements: value.requirements,
+        });
+        return deepFreeze({
+            ...value,
+            scope,
+            requirements: request.requirements,
+        });
+    }
+    catch (error) {
+        if (error instanceof TypeError && error.message.startsWith("Mesh Trust"))
+            throw error;
+        throw new TypeError("Mesh Trust state eligibility config is invalid", {
+            cause: error,
+        });
+    }
+}
+export function digestMeshTrustStateEligibilityConfigV1(value) {
+    const config = createMeshTrustStateEligibilityConfigV1(value);
+    return digestTrustJsonV1("mesh-eligibility-config", {
+        schemaVersion: config.schemaVersion,
+        mode: config.mode,
+        scope: config.scope,
+        policyId: config.policyId,
+        policyVersion: config.policyVersion,
+        policyDigest: config.policyDigest,
+        maximumProfileAgeMs: config.maximumProfileAgeMs,
+        requirements: config.requirements,
+        subjectMappingDigest: config.subjectMappingDigest,
+    });
+}
+function meshTrustBindingsAreCurrent(state, config) {
+    const resolver = state.dependencyBindings.find((binding) => binding.bindingDigest === config.profileResolverBindingDigest);
+    const integration = state.dependencyBindings.find((binding) => binding.bindingDigest === config.meshEligibilityBindingDigest);
+    const isCurrent = (binding) => binding !== undefined &&
+        binding.registeredAtLogicalMs <= config.logicalTimeMs &&
+        binding.validFromLogicalMs <= config.logicalTimeMs &&
+        (binding.validUntilLogicalMs === null ||
+            config.logicalTimeMs < binding.validUntilLogicalMs) &&
+        state.dependencyBindingHeads.some((head) => head.bindingKind === binding.bindingKind &&
+            head.bindingName === binding.bindingName &&
+            head.bindingVersion === binding.bindingVersion &&
+            head.bindingDigest === binding.bindingDigest);
+    return (isCurrent(resolver) &&
+        resolver.bindingKind === "profile_resolver" &&
+        resolver.policyDigest === config.policyDigest &&
+        resolver.subjectMappingDigest === config.subjectMappingDigest &&
+        isCurrent(integration) &&
+        integration.bindingKind === "mesh_eligibility" &&
+        integration.policyDigest === config.policyDigest &&
+        integration.subjectMappingDigest === config.subjectMappingDigest &&
+        integration.upstreamBindingDigest === resolver.bindingDigest &&
+        integration.configurationDigest ===
+            digestMeshTrustStateEligibilityConfigV1(config));
+}
+const unavailableMeshTrustDiagnostic = (peerId, reasonCode) => deepFreeze({
+    peerId,
+    disposition: "unavailable",
+    eligibilityDecisionId: null,
+    reasonCodes: [reasonCode],
+});
+const decisionDiagnostic = (peerId, decision) => deepFreeze({
+    peerId,
+    disposition: decision.disposition,
+    eligibilityDecisionId: decision.eligibilityDecisionId,
+    reasonCodes: decision.reasonCodes,
+});
+export function filterMeshCapabilityMatchesWithTrustStateV1(candidates, current, configValue) {
+    const config = createMeshTrustStateEligibilityConfigV1(configValue);
+    if (!Array.isArray(candidates))
+        throw new TypeError("Mesh Trust candidates are invalid");
+    for (const candidate of candidates)
+        try {
+            assertIdentifier(candidate?.peerId, "candidate.peerId");
+        }
+        catch (error) {
+            throw new TypeError("Mesh Trust candidates are invalid", {
+                cause: error,
+            });
+        }
+    if (new Set(candidates.map((candidate) => candidate.peerId)).size !==
+        candidates.length)
+        throw new TypeError("Mesh Trust candidates must be unique");
+    let state = null;
+    let sharedFailure = null;
+    try {
+        const scopeMeshId = "meshId" in config.scope ? config.scope.meshId : undefined;
+        const verifiedRuntime = verifiedEligibilityRuntimeStates.get(current);
+        const currentSnapshot = verifiedRuntime
+            ? latestEligibilitySnapshotByStateId.get(verifiedRuntime.stateId)
+            : null;
+        if (!verifiedRuntime ||
+            !currentSnapshot ||
+            verifiedRuntime.generation !== currentSnapshot.generation ||
+            verifiedRuntime.digest !== currentSnapshot.digest ||
+            config.logicalTimeMs !== verifiedRuntime.logicalTimeMs ||
+            !isRuntimeState(current) ||
+            !current.state ||
+            typeof current.state !== "object" ||
+            current.identity.tenantId !== config.scope.tenantId ||
+            current.identity.meshId !== scopeMeshId)
+            throw new TypeError("Mesh Trust current transaction is invalid");
+        state = validateEvidenceTrustStateV1(current.state.trust);
+        if (config.logicalTimeMs < state.logicalTimeHighWaterMs)
+            sharedFailure = "logical_time_rollback";
+        else if (!meshTrustBindingsAreCurrent(state, config))
+            sharedFailure = "dependency_binding_invalid";
+    }
+    catch {
+        sharedFailure = "state_conflict";
+    }
+    const diagnostics = candidates.map((candidate) => {
+        if (!state || sharedFailure)
+            return unavailableMeshTrustDiagnostic(candidate.peerId, sharedFailure ?? "state_conflict");
+        try {
+            const subject = {
+                schemaVersion: 1,
+                kind: "peer",
+                peerId: candidate.peerId,
+            };
+            const subjectDigest = digestSubjectV1(subject);
+            const scopeDigest = digestScopeV1(config.scope);
+            const profileKey = digestTrustProfileKeyV1({
+                tenantId: config.scope.tenantId,
+                subjectDigest,
+                scopeDigest,
+                policyDigest: config.policyDigest,
+            });
+            const profileHead = state.profileHeads.find((head) => head.profileKey === profileKey);
+            if (!profileHead)
+                return unavailableMeshTrustDiagnostic(candidate.peerId, "profile_unavailable");
+            const decision = evaluateTrustEligibilityV1(state, createTrustEligibilityRequestV1({
+                schemaVersion: 1,
+                tenantId: config.scope.tenantId,
+                subject,
+                subjectDigest,
+                scope: config.scope,
+                scopeDigest,
+                policyId: config.policyId,
+                policyVersion: config.policyVersion,
+                policyDigest: config.policyDigest,
+                profileId: profileHead.profileId,
+                profileDigest: profileHead.profileDigest,
+                maximumProfileAgeMs: config.maximumProfileAgeMs,
+                requirements: config.requirements,
+            }), config.logicalTimeMs);
+            return decisionDiagnostic(candidate.peerId, decision);
+        }
+        catch {
+            return unavailableMeshTrustDiagnostic(candidate.peerId, "profile_unavailable");
+        }
+    });
+    const unavailable = diagnostics.some((diagnostic) => diagnostic.disposition === "unavailable");
+    const matches = config.mode === "observe"
+        ? candidates
+        : unavailable
+            ? []
+            : candidates.filter((_, index) => diagnostics[index].disposition === "eligible");
+    return Object.freeze({
+        matches: Object.freeze([...matches]),
+        diagnostics: Object.freeze(diagnostics),
+        unavailable,
+    });
+}
+/** Encodes only the already-redacted projection; it never exports a profile or Fusion input. */
+export function encodeMeshTrustObservationV1(observation) {
+    const { schemaVersion: _schemaVersion, observerId: _observerId, observerKind: _observerKind, causationId: _causationId, scope, ...payload } = observation;
+    return Object.freeze({
+        type: "trust.observation",
+        ...payload,
+        subject: stripMeshSubject(observation.subject),
+        scope: stripMeshScope(scope),
+    });
+}
+function stripMeshSubject(subject) {
+    const { schemaVersion: _schemaVersion, ...wireSubject } = subject;
+    return Object.freeze(wireSubject);
+}
+function stripMeshScope(scope) {
+    if (scope.kind === "mesh")
+        return Object.freeze({ kind: "mesh" });
+    if (scope.kind === "objective")
+        return Object.freeze({
+            kind: "objective",
+            objectiveRevision: scope.objectiveRevision,
+        });
+    if (scope.kind === "work")
+        return Object.freeze({
+            kind: "work",
+            objectiveRevision: scope.objectiveRevision,
+            workItemId: scope.workItemId,
+            workItemRevision: scope.workItemRevision,
+            assignmentEpoch: scope.assignmentEpoch,
+            assignmentAuthorityId: scope.assignmentAuthorityId,
+            fencingToken: scope.fencingToken,
+        });
+    throw new TypeError("Trust observation scope is not Mesh-compatible");
+}
+//# sourceMappingURL=trust.js.map

package/dist/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,oBAAoB,EACpB,2BAA2B,GAI5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,kCAAkC,EAClC,gCAAgC,EAChC,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,+BAA+B,EAC/B,UAAU,EACV,aAAa,EACb,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,0BAA0B,EAC1B,0BAA0B,EAC1B,8BAA8B,EAC9B,kBAAkB,EAClB,uBAAuB,EACvB,4BAA4B,GAY7B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAC5C,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,iCAAiC,GAAG,KAAK,CAAC;AAChD,sEAAsE;AACtE,MAAM,2BAA2B,GAAG,IAAI,OAAO,EAAkB,CAAC;AAClE,MAAM,4BAA4B,GAAG,IAAI,OAAO,EAAkB,CAAC;AACnE,MAAM,gCAAgC,GAAG,IAAI,OAAO,EAQjD,CAAC;AACJ,MAAM,kCAAkC,GAAG,IAAI,GAAG,EAG/C,CAAC;AAiKJ,yEAAyE;AACzE,MAAM,UAAU,gCAAgC,CAC9C,aAAqB,EACrB,2BAAmC,EACnC,aAAoE;IAKpE,IACE,CAAC,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC;QACvC,CAAC,kBAAkB,CAAC,IAAI,CAAC,2BAA2B,CAAC;QACrD,CAAC,aAAa;QACd,OAAO,aAAa,KAAK,QAAQ;QACjC,OAAO,aAAa,CAAC,OAAO,KAAK,UAAU,EAC3C,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,OAAO,GAGT;QACF,aAAa;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,MAAM,MAAM,GAAG,OAAO,CAAC;gBACrB,kBAAkB,EAAE,KAAK,CAAC,KAAK,CAAC,kBAAkB;gBAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;gBACnE,OAAO,MAAM,CAAC;YAChB,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,QAAQ,EAAE,IAAa;gBACvB,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;gBACrD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;gBACjD,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC;oBAC1C,GAAG,MAAM,CAAC,4BAA4B;iBACvC,CAAC;gBACF,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;gBACnD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;aAClD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,IACE,CAAC,KAAK;gBACN,OAAO,KAAK,KAAK,QAAQ;gBACzB,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,iBAAiB,EAC7D,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,KAAc;oBACxB,IAAI,EAAE,2BAAoC;oBAC1C,KAAK,EAAE,KAAK,EAAE,KAAK;iBACpB,CAAC;YACJ,CAAC;YACD,4BAA4B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,WAA6C,CAAC;YAClD,IAAI,CAAC;gBACH,WAAW,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,QAAQ,EAAE,KAAc;oBACxB,IAAI,EAAE,2BAAoC;oBAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC;YACJ,CAAC;YACD,IACE,CAAC,MAAM,CAAC,MAAM,CACZ,KAAK,CAAC,KAAK,CAAC,YAAY,EACxB,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAC/B;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,IAAI,mBAAmB,EACnE,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,KAAc;oBACxB,IAAI,EAAE,2BAAoC;oBAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG;gBACnB,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY;gBAC3B,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,WAAW;aAC9C,CAAC;YACF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACpC,IACE,CAAC,MAAM,CAAC,MAAM,CACZ,KAAK,CAAC,KAAK,CAAC,kBAAkB,EAC9B,KAAK,CAAC,WAAW,CAAC,aAAa,CAChC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM;wBAChD,yBAAyB,EAC3B,CAAC;oBACD,OAAO;wBACL,QAAQ,EAAE,KAAc;wBACxB,IAAI,EAAE,2BAAoC;wBAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;qBACnB,CAAC;gBACJ,CAAC;gBACD,MAAM,kBAAkB,GAAG;oBACzB,GAAG,KAAK,CAAC,KAAK,CAAC,kBAAkB;oBACjC,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;wBAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,UAAU,EAAE,KAAK,CAAC,qBAAqB,KAAK,IAAI;qBACjD,CAAC;iBACH,CAAC;gBACF,OAAO;oBACL,QAAQ,EAAE,IAAa;oBACvB,SAAS,EAAE,MAAM,CAAC,MAAM,CACtB,KAAK,CAAC,KAAK,CAAC,kBAAkB,EAC9B,KAAK,CAAC,WAAW,CAAC,aAAa,CAChC;oBACD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;wBACnB,GAAG,KAAK,CAAC,KAAK;wBACd,kBAAkB,EAAE,KAAK,CAAC,WAAW,CAAC,sBAAsB;wBAC5D,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;wBACzC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;qBACtD,CAAC;iBACH,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAO,CAAC;gBAC7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/D,MAAM,OAAO,GAAG,0BAA0B,CACxC,KAAK,CAAC,KAAK,CAAC,KAAK,EACjB;oBACE,aAAa,EAAE,CAAC;oBAChB,IAAI,EAAE,iBAAiB;oBACvB,MAAM;oBACN,MAAM,EAAE,eAAe;oBACvB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;oBAC9C,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;oBAC9D,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,iBAAiB;oBACjD,oBAAoB,EAAE,KAAK,CAAC,WAAW,CAAC,oBAAoB;oBAC5D,aAAa,EAAE,KAAK,CAAC,UAAU;iBAChC,EACD;oBACE,qCAAqC,EAAE;wBACrC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CACnB,OAAO,KAAK,2BAA2B;4BACrC,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC;gCACE,qBAAqB,EAAE,2BAA2B;gCAClD,qBAAqB,EAAE,KAAK,CAAC,mBAAmB;gCAChD,MAAM,EAAE,CAAC,SAOR,EAAE,EAAE;oCACH,MAAM,UAAU,GACd,YAAY,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;oCAC5C,MAAM,KAAK,GAAG,UAAU,EAAE,UAAU,CAAC;oCACrC,OAAO,CACL,KAAK,KAAK,SAAS;wCACnB,0BAA0B,CAAC,UAAU,CAAC;wCACtC,SAAS,CAAC,mBAAmB;4CAC3B,KAAK,CAAC,mBAAmB;wCAC3B,SAAS,CAAC,2BAA2B;4CACnC,2BAA2B;wCAC7B,SAAS,CAAC,QAAQ,KAAK,QAAQ;wCAC/B,SAAS,CAAC,YAAY,KAAK,YAAY;wCACvC,SAAS,CAAC,oBAAoB;4CAC5B,KAAK,CAAC,WAAW,CAAC,oBAAoB;wCACxC,KAAK,CAAC,kBAAkB,KAAK,QAAQ;wCACrC,KAAK,CAAC,sBAAsB,KAAK,YAAY,CAC9C,CAAC;gCACJ,CAAC;6BACF;qBACR;iBACF,CACF,CAAC;gBACF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,MAAuC,EAAE,EAAE,CAC1C,MAAM,CAAC,UAAU,KAAK,WAAW,CACpC,CAAC;gBACF,OAAO;oBACL,QAAQ,EAAE,IAAa;oBACvB,SAAS;oBACT,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;wBACnB,GAAG,KAAK,CAAC,KAAK;wBACd,kBAAkB,EAAE,KAAK,CAAC,WAAW,CAAC,sBAAsB;wBAC5D,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;qBAC1C,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,QAAQ,EAAE,KAAc;oBACxB,IAAI,EAAE,2BAAoC;oBAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,2BAA2B,CAAC,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAClE,OAAO,aAAa,CAAC;AACvB,CAAC;AA0CD,8EAA8E;AAC9E,MAAM,UAAU,oCAAoC,CAKlD,OAAoE;IAEpE,IACE,CAAC,OAAO;QACR,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,OAAO,CAAC,OAAO;QAChB,CAAC,OAAO,CAAC,QAAQ;QACjB,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU;QAC9C,CAAC,OAAO,CAAC,YAAY;QACrB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC;QACtD,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QACnD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU;QAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU;QAC7C,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACvD,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAC7D,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,GAAG,CACvD,OAAO,CAAC,OAAiB,CAC1B,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC;YAC/B,GAAG,OAAO,CAAC,YAAY,CAAC,iBAAiB;SAC1C,CAAC;KACH,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;QAClC,QAAQ;QACR,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;YAC5C,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACtD,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;SACvD,CAAC;QACF,2BAA2B,EAAE,OAAO,CAAC,2BAA2B;QAChE,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,2BAA2B,EACzB,OAAO,CAAC,2BAA2B,KAAK,SAAS;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;QAC7D,iBAAiB;KAClB,CAAC,CAAC;IACH,MAAM,SAAS,GAA2C;QACxD,KAAK,CAAC,OAAO,CACX,KAAgD,EAChD,OAAqC;YAErC,IACE,CAAC,KAAK;gBACN,CAAC,OAAO;gBACR,OAAO,OAAO,KAAK,QAAQ;gBAC3B,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;gBACzC,OAAO,CAAC,UAAU,GAAG,CAAC;gBAEtB,OAAO,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;YACpE,MAAM,UAAU,GAAG,2BAA2B,CAC5C,OAAO,CAAC,QAAQ,EAChB;gBACE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBACjC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;gBAC7B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;gBAC7B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,GAAG,CAAC,aAAa,CAAC,2BAA2B,KAAK,SAAS;oBACzD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,2BAA2B,EACzB,aAAa,CAAC,2BAA2B;qBAC5C,CAAC;aACP,EACD,aAAa,CAAC,eAAe,CAC9B,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,EAAE;gBAChB,OAAO,MAAM,CACX,KAAK,EACL,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,kBAAkB;oBAC/C,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,gBAAgB,CACrB,CAAC;YACJ,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC3C,OAAO,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;YACnD,IAAI,YAAY,CAAC;YACjB,IAAI,CAAC;gBACH,YAAY,GAAG,MAAM,kBAAkB,CAAC;oBACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,eAAe,EAAE,aAAa,CAAC,eAAe;iBAC/C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,QAAQ;gBAAE,OAAO,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;YACpE,MAAM,QAAQ,GACZ,YAAY,CAAC,QAAoD,CAAC;YACpE,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,UAAU;gBAAE,OAAO,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAC9D,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBACH,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;oBACvC,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,QAAQ;oBACR,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,mBAAiC,CAAC;YACtC,IAAI,mBAAyD,CAAC;YAC9D,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;oBAC3C,OAAO,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;gBACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;gBACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBAC3B,IACE,QAAQ,KAAK,KAAK;wBAClB,CAAC,IAAI,KAAK,wBAAwB,IAAI,IAAI,KAAK,iBAAiB,CAAC;wBAEjE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBACzD,OAAO,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;gBACjD,CAAC;gBACD,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;oBAClC,QAAQ,EAAE,IAAI;oBACd,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;oBACnD,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC;wBAC1C,GAAG,QAAQ,CAAC,4BAA4B;qBACzC,CAAC;oBACF,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;oBAC7C,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;oBACrD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;iBACpD,CAAC,CAAC;gBACH,IACE,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC;oBAEtE,OAAO,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;gBACjD,mBAAmB,GAAG,QAAQ,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,MAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,GAAG,iBAAiB,CACxB,QAAQ,EACR,YAAY,CAAC,GAAG,CAAC,KAAK,EACtB,UAAU,CAAC,MAAM,KAAK,SAAS;oBAC7B,CAAC,CAAC,UAAU,CAAC,WAAY,CAAC,aAAa;oBACvC,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,EACvC,mBAAmB,CACpB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;gBACjC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ;gBACR,aAAa,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK;gBACrC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;oBACjC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAY,EAAE;oBAC1C,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;gBAClC,GAAG,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS;oBACtC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,qBAAqB,EAAE,mBAAmB,CAAC,qBAAqB;qBACjE,CAAC;gBACN,MAAM;gBACN,mBAAmB,EAAE,aAAa,CAAC,OAAO,CAAC,aAAa;gBACxD,2BAA2B,EAAE,aAAa,CAAC,2BAA2B;gBACtE,WAAW,EAAE,mBAAmB;aACjC,CAAC,CAAC;YACH,IAAI,UAA4D,CAAC;YACjE,IAAI,aAAa,CAAC,iBAAiB,KAAK,SAAS;gBAC/C,4BAA4B,CAAC,GAAG,CAC9B,YAAY,EACZ,aAAa,CAAC,iBAAiB,CAChC,CAAC;YACJ,IAAI,CAAC;gBACH,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;YACpD,CAAC;oBAAS,CAAC;gBACT,4BAA4B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;gBAC/C,OAAO,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;YACpD,IAAI,CAAC,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC;gBACpD,OAAO,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,QAAQ;gBACtB,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,QAAQ,EAAE,KAAK;oBACf,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,KAAK;iBACN,CAAC,CAAC;YACL,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,WAAW,EAAE,UAAU,CAAC,WAAW,KAAK,SAAS;gBACjD,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,QAAkD;IAMnE,MAAM,QAAQ,GAAG;QACf,aAAa,EAAE,CAAU;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;QACzC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;QACpC,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;KAC1C,CAAC;IACF,IAAI,CAAC;QACH,QAAQ,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9B,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,MAAM,GAAG,4BAA4B,CACzC,QAAQ,EACR,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAC/D,CAAC;gBACF,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,OAAO;oBAChD,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,OAAO,CAAC,eAAe;oBAC3D,CAAC,CAAC,EAAE,MAAM,EAAE;oBACZ,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,MAAM,MAAM,GAAG,kCAAkC,CAC/C,QAAQ,EACR,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAClD,CAAC;gBACF,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,OAAO,CAAC,aAAa;oBAC5D,CAAC,CAAC,EAAE,MAAM,EAAE;oBACZ,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;gBAC1B,MAAM,MAAM,GAAG,gCAAgC,CAC7C,QAAQ,EACR,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAU,CACzD,CAAC;gBACF,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;oBACxD,CAAC,CAAC,EAAE,MAAM,EAAE;oBACZ,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,MAAM,GAAG,iCAAiC,CAC9C,QAAQ,EACR,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAU,CAC1D,CAAC;gBACF,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,OAAO,CAAC,YAAY;oBAC1D,CAAC,CAAC,EAAE,MAAM,EAAE;oBACZ,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,WAAW,GAAG,+BAA+B,CACjD,QAAQ,EACR,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAU,CAC3D,CAAC;gBACF,OAAO,WAAW,CAAC,aAAa,KAAK,QAAQ,CAAC,OAAO,CAAC,aAAa;oBACjE,CAAC,CAAC,EAAE,WAAW,EAAE;oBACjB,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CACX,KAAQ,EACR,IAAuB;IAEvB,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAA6B,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,MAAwB,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAkD,EAClD,KAAa,EACb,QAAgB,EAChB,QAIC;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,CAAC,EAAE;QACf,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,MAAM,oBAAoB,GAAG,kBAAkB,CAC7C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAC1C,CAAC;IACF,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG;QACjB,aAAa,EAAE,CAAU;QACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,oBAAoB;QACpB,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;QACpC,WAAW,EAAE,KAAK;QAClB,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,4BAA4B,EAAE,MAAM,CAAC,MAAM,CACzC,CAAC,GAAG,QAAQ,CAAC,4BAA4B,CAAC,CAAC,IAAI,EAAE,CAClD;QACD,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,kBAAkB,EAAE,QAAQ;QAC5B,sBAAsB,EAAE,YAAY;KACrC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,UAAU;QACb,iBAAiB,EAAE,iBAAiB,CAClC,cAAc,EACd,UAAgE,CACjE;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAqC,EACrC,QAAkD;IAElD,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,CAAC,EAAE;QACf,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,aAAa,EAAE,CAAU;QACzB,UAAU;QACV,uBAAuB,EAAE,SAAS,CAAC,KAAK;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,wCAAwC,CAAC,KAAK,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,wCAAwC,CACtD,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IACE,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC,uBAAuB,KAAK,QAAQ;QACjD,CAAC,KAAK,CAAC,UAAU;QACjB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAC/B,CAAC,YAAY,CAAC,KAAK,EAAE;YACnB,eAAe;YACf,YAAY;YACZ,yBAAyB;SAC1B,CAAC;QAEF,OAAO,KAAK,CAAC;IACf,MAAM,UAAU,GAAG,KAAK,CAAC,UAAqC,CAAC;IAC/D,IACE,CAAC,YAAY,CAAC,UAAU,EAAE;QACxB,eAAe;QACf,WAAW;QACX,aAAa;QACb,sBAAsB;QACtB,cAAc;QACd,aAAa;QACb,sBAAsB;QACtB,8BAA8B;QAC9B,mBAAmB;QACnB,oBAAoB;QACpB,wBAAwB;QACxB,mBAAmB;KACpB,CAAC;QACF,UAAU,CAAC,aAAa,KAAK,CAAC;QAC9B,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACjE,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACjE,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC9D,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACnE,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC9D,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,4BAA4B,CAAC;QACvD,UAAU,CAAC,4BAA4B,CAAC,MAAM,GAAG,uBAAuB;QACxE,CAAC,UAAU,CAAC,4BAA4B,CAAC,KAAK,CAC5C,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAC1E;QACD,CAAC,UAAU,CAAC,4BAA4B,CAAC,KAAK,CAC5C,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,MAAM,CACrE;QAED,OAAO,KAAK,CAAC;IACf,KAAK,MAAM,GAAG,IAAI;QAChB,WAAW;QACX,aAAa;QACb,cAAc;QACd,aAAa;QACb,oBAAoB;KACrB;QACC,IAAI,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YACrE,OAAO,KAAK,CAAC;IACjB,MAAM,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,GAAG,cAAc,EAAE,GAChE,UAAU,CAAC;IACb,IACE,iBAAiB,CACf,cAAc,EACd,cAAyD,CAC1D,KAAK,UAAU,CAAC,iBAAiB;QAElC,OAAO,KAAK,CAAC;IACf,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAiC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,uBAAuB;QACpE,OAAO,KAAK,CAAC;IACf,MAAM,QAAQ,GAAG,MAAiC,CAAC;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAA6C,CAAC;IACtE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAA4C,CAAC;IACpE,OAAO,CACL,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAC3C,QAAQ,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW;QAC/C,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC,YAAY;QAC1C,KAAK,EAAE,KAAK,KAAK,UAAU,CAAC,WAAW;QACvC,kBAAkB,CAChB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAiC,CAAC,CAClE,KAAK,UAAU,CAAC,oBAAoB;QACrC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAC5C,IAAI,UAAU,CAAC,sBAAsB,EAAE,CACxC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAuC;IAEvC,OAAO,wCAAwC,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CACnB,KAA8B,EAC9B,IAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAE2B,EAC3B,aAAgB;IAEhB,MAAM,UAAU,GAAG,KAA2C,CAAC;IAC/D,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI;QAC9B,OAAO,CACL,YAAY,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC5D,OAAO,UAAU,CAAC,SAAS,KAAK,SAAS,CAC1C,CAAC;IACJ,OAAO,CACL,UAAU,CAAC,QAAQ,KAAK,KAAK;QAC7B,YAAY,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACvD;YACE,wBAAwB;YACxB,iBAAiB;YACjB,2BAA2B;SAC5B,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,UAAU,CAAC,KAAK,KAAK,aAAa,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAwB;IAChD,IAAI,SAAS,IAAI,MAAM,IAAI,SAAS,IAAI,MAAM;QAC5C,OAAQ,MAAuC,CAAC,OAAO,CAAC;IAC1D,IAAI,eAAe,IAAI,MAAM;QAC3B,OAAQ,MAA6C,CAAC,aAAa,CAAC;IACtE,IAAI,aAAa,IAAI,MAAM;QACzB,OAAQ,MAA2C,CAAC,WAAW,CAAC;IAClE,OAAQ,MAA4C,CAAC,YAAY,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CACrB,OAAsC;IAEtC,OAAO,CACL,OAAO,CAAC,IAAI,KAAK,gBAAgB;QACjC,OAAO,CAAC,IAAI,KAAK,iBAAiB;QAClC,OAAO,CAAC,IAAI,KAAK,oBAAoB;QACrC,OAAO,CAAC,IAAI,KAAK,kBAAkB;QACnC,OAAO,CAAC,IAAI,KAAK,mBAAmB,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAA2C,EAC3C,IAAO;IAEP,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9C,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CACb,KAA2C,EAC3C,IAAwC;IAExC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CACrB,KAA2C;IAE3C,OAAO,CACL,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,KAAK,CAAC,QAAQ,KAAK,IAAI;QACvB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QAC3C,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;QACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,WAAiD,EACjD,QAAkD,EAClD,UAAkB;IAElB,MAAM,WAAW,GAAG,WAAW,CAAC,4BAA4B,CAAC;IAC7D,OAAO,CACL,WAAW,CAAC,QAAQ,KAAK,IAAI;QAC7B,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC;QACzD,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC;QACtD,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAC1B,WAAW,CAAC,MAAM,IAAI,uBAAuB;QAC7C,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,WAAW,CAAC,KAAK,CACf,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,MAAM,CAClE;QACD,OAAO,WAAW,CAAC,qBAAqB,KAAK,SAAS;QACtD,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,oBAAoB,CAAC;QACtD,WAAW,CAAC,oBAAoB,IAAI,CAAC;QACrC,WAAW,CAAC,oBAAoB,IAAI,UAAU;QAC9C,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;YACrC,WAAW,CAAC,oBAAoB,KAAK,UAAU,CAAC,CACnD,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,sCAAsC,CAGpD,UAAwB,EACxB,IAAgC,EAChC,QAAwC;IASxC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IACD,IACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAC7D,UAAU,CAAC,MAAM,EACjB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC/C,IAAI,MAAM,GACR,aAAa,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,aAAa,CAAC;QACzB,CAAC;QACD,IACE,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC1E,CAAC;YACD,MAAM,GAAG,aAAa,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;IAC9E,MAAM,OAAO,GACX,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,UAAU,CAAC,MAAM,CACf,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAE,CAAC,MAAM,KAAK,UAAU,CACxD,CAAC;IACV,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QACpC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,mCAAmC,GAAG,iBAAiB,CAClE,sBAAsB,EACtB;IACE,aAAa,EAAE,CAAC;IAChB,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,MAAM;CACpB,CACF,CAAC;AAsCF;;;;GAIG;AACH,MAAM,UAAU,yCAAyC,CACvD,OAAgE,EAChE,QAAiC,EACjC,MAAqC,EACrC,SAA2C,EAC3C,UAAyC,EAAE;IAE3C,IACE,CAAC,cAAc,CAAC,OAAO,CAAC;QACxB,CAAC,OAAO,CAAC,KAAK;QACd,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACjC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACnD,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;QAC7C,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,CAAC;QAEnD,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,8BAA8B,CAC1C,QAAQ,EACR,MAAM,EACN,SAAS,EACT,OAAO,CACR,CAAC;IACF,MAAM,KAAK,GAAG,kCAAkC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvE,IACE,CAAC,KAAK;QACN,kCAAkC,CAAC,IAAI,IAAI,iCAAiC;QAE5E,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxE,IACE,KAAK;QACL,CAAC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;YACrC,CAAC,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBACvC,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;QAE9C,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,kCAAkC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE;QACvD,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,MAAM,EAAE,QAAQ,CAAC,cAAc;KAChC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,aAAa,EAAE,CAAU;QACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAChD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,OAAO,CAAC,KAAK;YAChB,KAAK;SACN,CAAC;KACH,CAAC,CAAC;IACH,gCAAgC,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC7C,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,MAAM,EAAE,QAAQ,CAAC,cAAc;QAC/B,aAAa,EAAE,QAAQ,CAAC,kBAAkB;KAC3C,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,0BAA0B,GAAG;IACjC,eAAe;IACf,MAAM;IACN,eAAe;IACf,OAAO;IACP,UAAU;IACV,eAAe;IACf,cAAc;IACd,qBAAqB;IACrB,cAAc;IACd,sBAAsB;IACtB,8BAA8B;IAC9B,8BAA8B;CACtB,CAAC;AAEX,MAAM,UAAU,uCAAuC,CACrD,KAAwC;IAExC,IAAI,CAAC;QACH,eAAe,CAAC,KAAK,EAAE,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;QACxE,IACE,KAAK,CAAC,aAAa,KAAK,CAAC;YACzB,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;YAEvD,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,iBAAiB,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACxD,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7C,iBAAiB,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QAC3D,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACtD,iBAAiB,CAAC,KAAK,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;QACtE,iBAAiB,CACf,KAAK,CAAC,4BAA4B,EAClC,8BAA8B,CAC/B,CAAC;QACF,iBAAiB,CACf,KAAK,CAAC,4BAA4B,EAClC,8BAA8B,CAC/B,CAAC;QACF,IACE,KAAK,CAAC,oBAAoB,KAAK,mCAAmC;YAClE,KAAK,CAAC,4BAA4B,KAAK,KAAK,CAAC,4BAA4B;YAEzE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,IACE,KAAK,CAAC,IAAI,KAAK,MAAM;YACrB,KAAK,CAAC,IAAI,KAAK,WAAW;YAC1B,KAAK,CAAC,IAAI,KAAK,MAAM;YAErB,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG;YACxB,aAAa,EAAE,CAAU;YACzB,IAAI,EAAE,MAAe;YACrB,MAAM,EAAE,yBAAyB;SAClC,CAAC;QACF,MAAM,uBAAuB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,+BAA+B,CAAC;YAC9C,aAAa,EAAE,CAAC;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,eAAe,CAAC,iBAAiB,CAAC;YACjD,KAAK;YACL,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,WAAW,uBAAuB,EAAE;YAC/C,aAAa,EAAE,uBAAuB;YACtC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;YAChB,GAAG,KAAK;YACR,KAAK;YACL,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;YACtE,MAAM,KAAK,CAAC;QACd,MAAM,IAAI,SAAS,CAAC,gDAAgD,EAAE;YACpE,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAwC;IAExC,MAAM,MAAM,GAAG,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAC9D,OAAO,iBAAiB,CAAC,yBAAyB,EAAE;QAClD,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;KACI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,2BAA2B,CAClC,KAA2B,EAC3B,MAAyC;IAEzC,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAC5C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,4BAA4B,CAC3E,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAC/C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,4BAA4B,CAC3E,CAAC;IACF,MAAM,SAAS,GAAG,CAChB,OAA8D,EAC9D,EAAE,CACF,OAAO,KAAK,SAAS;QACrB,OAAO,CAAC,qBAAqB,IAAI,MAAM,CAAC,aAAa;QACrD,OAAO,CAAC,kBAAkB,IAAI,MAAM,CAAC,aAAa;QAClD,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI;YACnC,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACrD,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAC/B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;YACxC,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;YACxC,IAAI,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;YAC9C,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,CAC/C,CAAC;IACJ,OAAO,CACL,SAAS,CAAC,QAAQ,CAAC;QACnB,QAAS,CAAC,WAAW,KAAK,kBAAkB;QAC5C,QAAS,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;QAC9C,QAAS,CAAC,oBAAoB,KAAK,MAAM,CAAC,oBAAoB;QAC9D,SAAS,CAAC,WAAW,CAAC;QACtB,WAAY,CAAC,WAAW,KAAK,kBAAkB;QAC/C,WAAY,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;QACjD,WAAY,CAAC,oBAAoB,KAAK,MAAM,CAAC,oBAAoB;QACjE,WAAY,CAAC,qBAAqB,KAAK,QAAS,CAAC,aAAa;QAC9D,WAAY,CAAC,mBAAmB;YAC9B,uCAAuC,CAAC,MAAM,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,8BAA8B,GAAG,CACrC,MAAc,EACd,UAA6B,EACU,EAAE,CACzC,UAAU,CAAC;IACT,MAAM;IACN,WAAW,EAAE,aAAsB;IACnC,qBAAqB,EAAE,IAAI;IAC3B,WAAW,EAAE,CAAC,UAAU,CAAC;CAC1B,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,MAAc,EACd,QAAoC,EACG,EAAE,CACzC,UAAU,CAAC;IACT,MAAM;IACN,WAAW,EAAE,QAAQ,CAAC,WAAW;IACjC,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;IACrD,WAAW,EAAE,QAAQ,CAAC,WAAW;CAClC,CAAC,CAAC;AAEL,MAAM,UAAU,2CAA2C,CAIzD,UAAwB,EACxB,OAAgE,EAChE,WAA8C;IAE9C,MAAM,MAAM,GAAG,uCAAuC,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,KAAK,MAAM,SAAS,IAAI,UAAU;QAChC,IAAI,CAAC;YACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,mCAAmC,EAAE;gBACvD,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,IACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAC7D,UAAU,CAAC,MAAM;QAEjB,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAE9D,IAAI,KAAK,GAAgC,IAAI,CAAC;IAC9C,IAAI,aAAa,GAA6B,IAAI,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,WAAW,GACf,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,MAAM,eAAe,GAAG,gCAAgC,CAAC,GAAG,CAC1D,OAAiB,CAClB,CAAC;QACF,MAAM,eAAe,GAAG,eAAe;YACrC,CAAC,CAAC,kCAAkC,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC;YACjE,CAAC,CAAC,IAAI,CAAC;QACT,IACE,CAAC,eAAe;YAChB,CAAC,eAAe;YAChB,eAAe,CAAC,UAAU,KAAK,eAAe,CAAC,UAAU;YACzD,eAAe,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;YACjD,MAAM,CAAC,aAAa,KAAK,eAAe,CAAC,aAAa;YACtD,CAAC,cAAc,CAAC,OAAO,CAAC;YACxB,CAAC,OAAO,CAAC,KAAK;YACd,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,QAAQ;YACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW;YAEvC,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,KAAK,GAAG,4BAA4B,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,sBAAsB;YACrD,aAAa,GAAG,uBAAuB,CAAC;aACrC,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC;YAClD,aAAa,GAAG,4BAA4B,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,gBAAgB,CAAC;IACnC,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC/C,IAAI,CAAC,KAAK,IAAI,aAAa;YACzB,OAAO,8BAA8B,CACnC,SAAS,CAAC,MAAM,EAChB,aAAa,IAAI,gBAAgB,CAClC,CAAC;QACJ,IAAI,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,aAAa,EAAE,CAAU;gBACzB,IAAI,EAAE,MAAe;gBACrB,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC;YACF,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,uBAAuB,CAAC;gBACzC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;gBAC/B,aAAa;gBACb,WAAW;gBACX,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CACzC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CACzC,CAAC;YACF,IAAI,CAAC,WAAW;gBACd,OAAO,8BAA8B,CACnC,SAAS,CAAC,MAAM,EAChB,qBAAqB,CACtB,CAAC;YACJ,MAAM,QAAQ,GAAG,0BAA0B,CACzC,KAAK,EACL,+BAA+B,CAAC;gBAC9B,aAAa,EAAE,CAAC;gBAChB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;gBAC/B,OAAO;gBACP,aAAa;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW;gBACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,EACF,MAAM,CAAC,aAAa,CACrB,CAAC;YACF,OAAO,kBAAkB,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,8BAA8B,CACnC,SAAS,CAAC,MAAM,EAChB,qBAAqB,CACtB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAClC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,KAAK,aAAa,CACzD,CAAC;IACF,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,KAAK,SAAS;QACvB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,UAAU,CAAC,MAAM,CACf,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAE,CAAC,WAAW,KAAK,UAAU,CAC7D,CAAC;IACV,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QACpC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,4BAA4B,CAC1C,WAA+B;IAE/B,MAAM,EACJ,aAAa,EAAE,cAAc,EAC7B,UAAU,EAAE,WAAW,EACvB,YAAY,EAAE,aAAa,EAC3B,WAAW,EAAE,YAAY,EACzB,KAAK,EACL,GAAG,OAAO,EACX,GAAG,WAAW,CAAC;IAChB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,mBAAmB;QACzB,GAAG,OAAO;QACV,OAAO,EAAE,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC;QAC9C,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;KAC7B,CAAC,CAAC;AACL,CAAC;AACD,SAAS,gBAAgB,CAAC,OAAsC;IAC9D,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,cAAc,CAAC,KAAkC;IACxD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAC5B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,WAAW;YACjB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC,CAAC;IACL,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QACvB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,MAAM;YACZ,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;IACL,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;AACxE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentplat/mesh",
-  "version": "0.3.0-alpha.2",
+  "version": "0.3.0-alpha.4",
   "description": "Provider-neutral peer state and effect contracts for AgentPlat Mesh applications.",
   "type": "module",
   "license": "Apache-2.0",
@@ -19,6 +19,10 @@
     "./coordination": {
       "types": "./dist/coordination.d.ts",
       "import": "./dist/coordination.js"
+    },
+    "./trust": {
+      "types": "./dist/trust.d.ts",
+      "import": "./dist/trust.js"
     }
   },
   "files": [
@@ -26,8 +30,9 @@
     "README.md"
   ],
   "dependencies": {
-    "@agentplat/mesh-protocol": "^0.3.0-alpha.2",
-    "@agentplat/mesh-crypto": "^0.3.0-alpha.2"
+    "@agentplat/mesh-crypto": "^0.3.0-alpha.4",
+    "@agentplat/mesh-protocol": "^0.3.0-alpha.4",
+    "@agentplat/trust": "^0.3.0-alpha.4"
   },
   "engines": {
     "node": ">=20.19.3"